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SENATE  MEASURE 
EMBRACES  OPT-IN 

Class-action  suits  on 
privacy  a  possibility 


BY  PATRICK  THIBODEAU 

WASHINGTON 

A  new  push  is  on  in  Congress 
for  online  privacy  rules  that 
could  raise  legal  risks  for  busi¬ 
nesses  and  impose  new  techni¬ 
cal  requirements  on  them. 


The  chairman  of  the  Senate 
Commerce  Committee,  Ernest 
“Fritz”  Hollings  (D-S.C.),  last 
week  introduced  his  long- 
awaited  privacy  bill,  which 
would  set  national  privacy 
standards  for  all  online  trans¬ 
actions.  It  includes  an  “opt-in” 
provision,  meaning  sensitive 
personal  data  couldn’t  be  col¬ 
lected  unless  the  consumer  has 
given  explicit  permission. 

The  bill  would  also  preempt 
the  ability  of  states  to  pass 
their  own  online  privacy  rules, 
Senate,  page  65 


GLASS  HOUSE  FACES  ROCKY  ISSUES 


Servers’  encroachment 
still  tough  to  manage 


Skills  shortage  5  years 
out; firms  unprepared 


IBM  CLAIM  TO  ebXML 
PATENT  SPARKS  FUROR 


Critics  see  hold  on  trading  partner  portion 
of  the  spec  as  big  blow  to  open  standards 


BY  MICHAEL  MEEHAN 

A  patent  claim  by  IBM  cover¬ 
ing  a  submission  it  made  to  the 
electronic-busi¬ 
ness  XML  stan¬ 
dards  body  creat¬ 
ed  a  furor  last  week  over  the 
notion  of  open  standards  and 
the  ability  of  vendors  to  curb 
their  proprietary  tendencies. 

Last  month,  IBM  notified  the 


E-CONTROVERSY 


Organization  for  the  Advance¬ 
ment  of  Structured  Informa¬ 
tion  Standards  that  it  holds  a 
patent  for  the 
trading  partner 
agreement  por¬ 
tion  of  the  ebXML  e-com¬ 
merce  trading  specifications. 

Bob  Sutor,  director  of  e-busi¬ 
ness  standards  strategy  at  IBM, 
was  chairman  of  the  Billerica, 


Mass.-based  OASIS  board 
when  IBM  submitted  the  Trad¬ 
ing  Partner  Agreement  Mark¬ 
up  Language  to  be  part  of  what 
OASIS  has  called  “an  open 
XML-based  infrastructure  that 
will  enable  business  informa¬ 
tion  to  be  exchanged  consis¬ 
tently  on  a  global  basis.” 

Although  IBM  said  it  would¬ 
n’t  charge  for  use  of  the  tech¬ 
nology,  many  viewed  its  claim 
to  the  patent  as  a  complete 
sellout  of  ebXML’s  original 
open-standards  promise. 

ebXML  Patent,  page  65 


BY  CRAIG  STEDMAN 

LAS  VEGAS 

As  far  back  as  the  mid-1990s, 
companies  began  bucking  the 
IT  decentralization  trend  by 
moving  Unix  and  Windows 
servers  into  their  data  centers. 
But  many  data  center  man¬ 
agers  are  still  struggling  to  co¬ 
ordinate  systems  management 
processes  between  their  main¬ 
frames  and  the  newer  servers. 

The  big  roadblock  is  getting 
business  managers  and  various 
IT  groups  to  agree  that  com¬ 
mon  mainframelike  systems 
operation  proce¬ 
dures  are  needed 
in  areas  such  as 
software  change 
management  and 
the  scheduling  of 
batch  processing 
Servers,  page  16 


BY  JULIA  KING 

Attention  unemployed  main¬ 
frame  programmers  and  oper¬ 
ators:  Prospects  are  dim  for 
landing  a  mainframe  IT  job  in 
the  immediate  future. 

But  experts  predicted  last 
week  that  by  about  2007,  when 
aging  IT  staffers  are  expected 
to  begin  retiring  in  large  num¬ 
bers,  companies  will  be  clam¬ 
oring  for  your  skills,  especially 
if  they  include  mainframe  sys¬ 
tems  support  experience  and 
knowledge. 

In  other  words,  the  much- 
touted  mainframe 
skills  shortage  is 
still  about  five 
years  off. 

“It’s  really  more 
of  a  futuristic 
thing  and  not  a 
Shortage,  page  16 


ONLINE:  More  stories 
of  interest  to  mainframers 
are  on  our  Server/Main¬ 
frame  Special  Coverage 

Opage:  www.computer 
world.com/q?a1900 
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Tending 

Profitable  Projects 

The  tough  economy  is  forcing  project  managers  such  as  PacifiCorp’s  Jann 
Davis  (below)  to  take  a  back-to-basics,  cost-focused  approach  to  keep  proj¬ 
ects  in  the  black.  Find  out  about  methodologies,  tools  and 
out-of-the-box  thinking  that  can  help  you  succeed. 

Stories  begin  on  page  36. 


PROJECT 

MANAGEMENT 


On  the  road  to  Web  services, 

the  only  way  to 
keep  your  freedom 
is  by  sticking 
to  the  open  road. 


DELIVER 


SERVICES 


CREATE 

NEW  SERVICES 


DEPLOY 

SERVICES 


IDENTITY 
AND  SECURITY 


Open  Net  Environment 


Reports  from  the  road:  MLB®  Advanced  Media. 

Sun  empowers  Major  League  Baseball®  Advanced 
Media  to  deliver  dynamic  Web  site  content  with 
the  Sun  ONE  Application  Server  to  over  40  million 
fans,  while  the  Sun  ONE  Directory  Server  keeps  visitor 
registration  information  safe. 

Sun’s  partner  for  the  ride:  EDS. 

Sun  provides  on-site  support  to  EDS  consulting  teams, 
so  they  can  provide  faster,  more  direct  service  to 
their  customers  implementing  enterprise-level  portal, 
wireless  and  Web  services  projects. 


REGISTER  TODAY 

for  our  exclusive  Web  seminar  on  the 
importance  of  open  standards  in  Web  services. 
www.sun.com/stayopen 


Make  the  net  work.  With  Surf  ONE, 
the  wide-open  comprehensive  software 
platform  for  Web  services. 

Once  you've  started  down  the  road  to  Web 
services,  you  need  to  move  fast,  stay  flexible 
and  take  advantage  of  business  opportunities 
wherever  you  find  them. That’s  where  Sun'ONE 
comes  in.  Sun  ONE  is  a  complete  software  archi¬ 
tecture  that  enables  you  to  create,  develop 
and  deploy  the  kind  of  innovative  “Services 
on  Demand”  that  build  customer  loyalty  and 


quickly  improve  your  business.  Sun  ONE  is 
backed  by  a  power  trio  of  award-winning 
products  (Sun  ONE  infrastructure  software,  the 
Solaris’"  Operating  Environment  and  Sun  ONE 
Developer  Tools  for  Java")  and  is  built  on  open 
Web  standards  such  as  XML,  LDAP  and  the 
Java  universal  development  platform.  And 
since  it  is  designed  from  the  ground  up  to 
integrate  with  your  existing  IT  environment 
and  the  products  you  are  already  using,  control 
remains  firmly  in  your  hands. 


Make  the  net  work  with  Web  services 
that  can  transform  your  business: 


Transformative  change  begins 
with  |ava "  technology. 

At  the  enterprise  level,  lava"  technology  and 
XML  mean  interoperability.  Sun"  ONE  capitalizes 
on  seven  years  of  |ava  leadership  to  provide  a 
platform  for  Web  services  that  leverages  your 
existing  systems.  And  since  78%  of  developers 
view  |2EE"  server  software  as  the  most  effective 
platform  for  building  and  deploying  Web  services, 
you  can  be  sure  Sun  ONE  will  get  you  started 
down  the  road  in  the  right  direction. 

The  Solaris"  Operating  Environment 
lets  you  deploy  services  on  an 
enterprise-class  platform. 

Make  sure  your  services  are  always  available 
for  your  customers,  with  the  rock-solid  Solaris" 
Operating  Environment.  You’ll  be  in  good 
company— after  all,  many  of  the  largest  Internet 
businesses  already  run  on  it.  Solaris  OE  is  the 
foundation  of  Sun  ONE  and  provides  a  highly 
reliable  application  platform  for  any  kind  of 
service.  That’s  what  we  call  “Services  on  Demand.” 


Sun  ONE  infrastructure  software 
delivers  services  today. 

Sun  ONE  Directory  Server  already  enables  60% 
of  the  Fortune  100  to  conduct  business  on 
the  Web  quickly  and  securely.  And  Sun  ONE 
Developer  Tools  for  lava  were  judged  Best  Java 
IDE  by  |avaWorld.  They  both  work  seamlessly 
with  Sun  ONE  Application  Server  and  Sun  ONE 
Portal  Server  to  let  you  deliver  services  that 
quickly  scale  across  multiple  platforms.  The 
faster  you  get  your  Web  services  to  market, 
the  greater  the  business  opportunity.  There’s 
no  speed  limit  on  this  road. 

Sun  ONE  Consulting  can  start  you  down 
the  road  to  Web  services  right  now. 

Sun  ONE  Consulting  lets  you  reduce  the  time, 
cost  and  risk  of  transforming  your  business 
with  Web  services.  Sun  ONE  Consulting  can 
help  you  with  every  phase  of  developing  and 
deploying  innovative  services,  giving  you  the 
kinds  of  sustained  business  advantages  you 
would  expect  from  a  business  innovator  like  Sun. 


Companies  already  on  the 
road  with  Sun  "ONE: 

Life  Time  Fitness 

The  Sun  ONE  architecture  has  enabled  Life  Time 
Fitness  to  store  account  and  payment  data  for 
thousands  of  members  in  order  for  employees 
and  customers  to  conduct  millions  of  transactions 
over  the  Life  Time  Fitness  network. 


Systems  Integrators: 

Sun  teams  with  some  of  the  best  systems  integrators  in  the  business,  so  you’ll  have  the  expertise 
you  need  to  begin  developing  “Services  on  Demand”  on  the  Sun  ONE  platform  today: 

°  Cap  Gemini  Ernst  &  Young  °  EDS 

°  Computer  Sciences  Corporation  °  KPMG  Consulting,  Inc. 

°  Deloitte  Consulting  °  Science  Applications  International  Corporation 


The  road  to 
Web  services 
begins  with 
Sun  ONE. 


CREATE  NEW  SERVICES 

•  Sun  ONE  Developer  Tools 

•  Sun  ONE  Application  Server 

•  Sun  ONE  Integration  Server 

The  fastest  road  to  maximizing 
productivity  and  the  speed  of 
development 


DELIVER  SERVICES 

•  Sun  ONE  Portal  Server 

•  Sun  ONE  Messaging  Server 

•  Sun  ONE  Calendar  Server 

The  fastest  road  to  providing 
prepackaged  and 
custom-developed 
services. 
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DEPLOY  SERVICES 

*  Solaris  Operating  Environment 

The  fastest  road  to  deploying 
Java  and  XML-based  services 
quickly  and  reliably. 


IDENTITY  AND  SECURITY 

•  Sun  ONE  Directory  Server 

•  Sun  ONE  Identity  Server 

The  fastest  road  to  leveraging  and 
protecting  your  corporate  assets 


NEED  DIRECTIONS? 
REGISTER  TODAY 

for  our  exclusive 
Web  seminar  on  the 
importance  of 
open  standards  in 
Web  services. 
www.sun.com/stayopen 


Java 


&Sun 

microsystems 

We  make  the  net  work. 
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WEARABLE  COMPUTERS 

These  advanced  computing  devices 
could  establish  a  new  fabric  for 
mobile  computing,  but  continuous 
connectivity  could  blur  personal 
and  work  time.  PAGE  54 


HARNESSING  GRID  IRON 

Grid  computing  uses  distributed 
computing  techniques  to  capture  un¬ 
used  processing  cycles  on  networked 
servers  and  PCs.  The  technology  can 
pay  big  dividends  —  when  used  with 
the  right  applications.  PAGE  48 
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NEWS  6 

6  Two  economists  give  diamet¬ 
rically  opposed  testimony  in  the 
Microsoft  antitrust  case. 

6  Analysts  warn  that  Walter 
Hewlett’s  lawsuit  targeting  the 
HP/Compaq  merger  could  disrupt 
the  integration  of  the  companies. 

7  A  Microsoft  executive  says  the 

Windows  .Net  Server  operating 
system,  which  is  already  late,  won’t 
ship  until  sometime  next  year. 

8  Companies  that  use  driver’s 
licenses  to  authenticate  customers 
may  have  to  upgrade  their  tech¬ 
nology  if  Congress  approves  new 
legislation. 

12  The  U.S.  Army  is  implementing 
software  to  help  analyze  security 
holes  and  install  patches  on  more 
than  1.5  million  PCs. 


vJ'LllvJV  For  breaking  news,  updated 
twice  daily,  visit  Computer- 
I  /II  world.com: 

www.computerworld.com/q?q4000 


BUSINESS  33 

33  David  Foote  writes  that  you 
must  act  now  if  you’re  looking  to 
rebuild  your  IT  organization  after 
recession-induced  layoffs. 

36  Strict  adherence  to  deadlines 

and  avoidance  of  cost  overruns 
are  back  in  vogue  as  project  man¬ 
agement  slants  toward  the  bottom 
line. 

40  National  City  CIO  Jim  Hughes 
challenged  his  1,200-person  IT 
staff  to  cut  project  duration  in  half. 
Hey,  a  45%  reduction  ain’t  bad. 

42  Hiring  a  project  management 
SWAT  team  can  deliver  big  bene¬ 
fits,  so  long  as  the  team’s  mission 
is  well  communicated  to  staffers 
who  might  be  resentful  of  the 
outside  help. 

44  Workstyles:  Some  of  the  IT 
staffers  at  Federal  Home  Loan 
Mortgage  have  enough  business 
savvy  to  help  with  the  company’s 
mortgage  trading  business. 


TECHNOLOGY  47 

47  Nicholas  Petreley  writes  an 
open  letter  to  Scott  McNealy,  say¬ 
ing  Sun  must  redouble  its  competi¬ 
tive  efforts  against  Windows. 

52  Automating  storage  resource 

management  tasks  makes  sense  as 
SANs  become  more  common.  Poli¬ 
cy-based  tools  can  help  with  alerts; 
broader  capabilities  are  evolving. 

55  QuickStudy:  From  zinc  air  to 
lithium-ion  cells,  new  battery 
technologies  aim  to  keep  mobile 
computing  users  online  longer. 

56  Emerging  Technologies: 

InfiniBand’s  I/O  technology  is 
faster  and  more  scalable  than  the 
PCI  bus  standard.  It  will  turn  to¬ 
day’s  server  designs  inside  out  — 
and  break  them  into  separately 
scalable  subsystems. 

60  Security  Journal:  who  deep- 

sixed  the  SQL  database?  In  the 
frenzy  to  recover  the  system,  Vince 
Tuesday  finds  that  administrators 
may  have  erased  the  key  evidence. 


OPINIONS  28 

28  Maryfran  Johnson  thinks  it’s 

time  IT  managers  built  up  their 
business  credibility  by  measuring 
the  ROI  of  IT  projects  in  ways 
their  CFOs  can  appreciate. 

28  Pimm  Fox  says  asset-tracking 
software  can  help  you  in  three  key 
areas  if  you’re  looking  to  rein  in 
IT  costs.  It’s  especially  useful  for 
negotiating  deals  and  deciding 
which  equipment  to  keep. 

29  Michael  Gartenberg  has  some 
advice  for  IT  managers  thinking 
about  buying  PCs:  Push  vendors 
for  more  —  a  lot  more  —  than  what 
the  industry  has  offered  to  date. 

66  Frank  Hayes  says  the  word 
how  is  becoming  increasingly 
important  today  in  explaining  the 
benefits  of  an  IT  project.  So  make 
sure  your  audience  knows  “how.” 
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INFINIBAND 

After  reading  the  report  on  page  56 
spotlighting  InfiniBand,  visit  our 
Web  site  for  a  glossary  of  terms 
and  links  to  more  resources. 

www.computerworld.com/q728405 


CRIMINAL 

INSECURITY? 

The  National  Academy  of  Sciences 
wants  Congress  to  make  it  easier 
to  punish  companies  that  produce 
nonsecure  software  that  puts  busi¬ 
nesses  and  consumers  at  risk,  ac¬ 
cording  to  a  recent  report.  And 
there’s  no  shortage  of  opinions  on 
this  issue.  Want  to  register  yours? 
www.computerworld.com/q7a1890 


WRONG  TURN  ON 
DIGITAL  RIGHTS? 

The  digital  rights  management 
software  that  Microsoft  Corp. 
ships  with  new  multimedia  pro¬ 
grams  could  allow  the  software 
maker  unprecedented  control 
over  content,  says  guest  columnist 
Curtis  Karnow. 
www.computerworld.com/ 
community/os 


FREE  SOFTWARE, 
U.S.-STYLE 

Is  there  liberty  and  justice  for  all 
in  free  software?  Not  to  mention 
great  wealth  for  some?  Log  in  for 
a  spirited  discussion. 

www.computerworld.com/q7a1880 
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Oates  to  Take  Stand 
In  Remedy  Hearing 


Microsoft  Corp.  said  that  Bill  Gates, 
its  chairman  and  chief  software  ar¬ 
chitect,  is  expected  to  testify  today 
in  the  antitrust  remedy  proceedings 
that  are  taking  place  in  U.S.  District 
Court  in  Washington  (see  related 
story,  right).  Gates  will  claim  that 
restrictions  proposed  by  the  group 
of  nonsettling  states  would  imperil 
Microsoft  and  harm  the  entire  PC 
industry,  the  company  said. 


Lucent  Fills  CIO  Job 
After  Nine  Months 

Murray  Hill,  N.J.-based  Lucent  Tech¬ 
nologies  Inc.  named  Ruth  Bruch  its 
CIO,  effective  May  15,  and  said  she 
will  initially  focus  on  completing  a 
re-engineering  of  the  company’s 
systems  and  on  the  installation  of 
SAP  AG  business  applications.  The 
CIO  post  has  been  vacant  since 
July.  Bruch,  48,  previously  was  CIO 
at  Visteon  Corp.,  a  Dearborn,  Mich.- 
based  supplier  of  automotive  parts. 


CA  to  Give  Users 
Web  Data  Access 

Computer  Associates  International 
Inc.  said  it  plans  to  announce  an 
online  customer  information  service 
at  its  CA  World  2002  conference 
in  Orlando  this  week.  Users  of  Cus¬ 
tomer  Connect  will  be  able  to  ac¬ 
cess  account  data  and  request 
technical  support  help  via  the  Web, 
Islandia,  N.Y.-based  CA  said.  All 
customers  with  support  contracts 
will  be  able  to  use  the  service. 


Short  Takes 

The  U.S.  POSTAL  SERVICE  con¬ 
firmed  that  a  systems  glitch  shut 
down  its  package  tracking  system 
last  Monday  and  said  it  hoped  to 
resolve  the  problem  over  the  week¬ 
end.  . . .  Due  to  user  feedback,  SUN 
MICROSYSTEMS  INC.  said  it’s  re¬ 
thinking  a  decision  to  end  support 
for  Intel-based  servers  in  its  upcom¬ 
ing  Solaris  9  operating  system. 


Remedy  Phase  Focuses 
On  Witness  Credibility 


Antitrust  judge  starts  hearing  Microsoft’s  side 


BY  PATRICK  THIBODEAU 

WASHINGTON 

UNLIKE  HER  prede¬ 
cessor  in  the  Mi¬ 
crosoft  Corp.  anti¬ 
trust  case,  Judge 
Colleen  Kollar- 
Kotelly  isn’t  showing  her  cards. 

Where  trial  Judge  Thomas 
Penfield  Jackson’s  face  varied 
from  utter  boredom  to  beet 
red  with  anger  during  testimo¬ 
ny,  Kollar-Kotelly’s  expressions 
range  from  thoughtful  and  at¬ 
tentive  to  a  polite,  inscrutable 
smile,  with  only  rare  signs  of 
frustration  over  an  attorney’s 
line  of  questioning. 

Kollar-Kotelly  is  judge  and 
jury  during  this  remedy  phase, 
ultimately  determining  who  is 
telling  the  truth.  That  must 
have  been  difficult  for  her  at 
times  last  week. 

Kollar-Kotelly  heard  from 
two  distinguished  economists: 
Carl  Shapiro,  a  professor  of 
business  strategy  at  the  Univer¬ 
sity  of  California,  Berkeley,  who 
was  called  by  the  states,  and 
Microsoft  witness  Kevin  Mur¬ 
phy,  an  economics  professor  at 
The  University  of  Chicago 
Graduate  School  of  Business. 
The  two  men  have  diametrical¬ 
ly  opposed  views  on  the  case. 

Attorneys  on  both  sides  at¬ 
tempted  to  chip  away  at  the  wit¬ 
nesses’  credibility,  but  whether 
or  not  they  made  any  ground 
boils  down  to  what  Kollar- 
Kotelly  thinks. 

She  isn’t  an  economist.  Her 
strength  is  probably  “sensing 
who  is  telling  the  truth  and 
who  is  not  telling  the  truth. 
That  is  what  judges  are  really 
good  at,”  said  Bob  Lande,  a  law 
professor  at  the  University  of 
Baltimore  School  of  Law. 

Microsoft  began  presenting 
its  case  last  week  after  four 

IIC'It'  For  more  on  this 
W  LLLv-lY  case,  visit  our 
T  Microsoft  antitrust 

1  Jl  1L\V»  Special  Focus  page: 

www.computerworld.com/q7s1100 


weeks  of  testimony  from  15 
witnesses  for  the  states,  giving 
the  states  their  chance  to  begin 
attacking  the  credibility  of 
Microsoft’s  witnesses. 

In  the  case  of  Murphy,  the 
states  were  able  to  point  out 
that  his  consulting  Firm  has 
been  doing  work  for  Microsoft 
for  the  past  four  or  five  years 
and  that  most  of  his  work  on 
software  markets  was  funded 
by  the  company.  But  otherwise, 
states’  attorney  Steven  Kuney 
seemed  to  have  trouble  shaking 
Murphy’s  argument  for  a  less 
restrictive  set  of  remedies. 

One  Microsoft  witness,  Scott 


Borduin,  vice  president  and 
chief  technology  officer  at 
Autodesk  Inc.,  testified  on  the 
value  of  the  Windows  platform 
as  a  standard.  But  in  cross- 
examination,  Borduin  acknowl¬ 
edged  that  he  was  troubled  to 
learn  of  Microsoft’s  plans  to 
omit  the  Java  Virtual  Machine 
from  Windows  XP  —  therefore 
dropping  support  for  Java  — 
since  some  of  his  software 
company’s  products  depend 
on  Java’s  presence  in  the  oper¬ 
ating  system. 

In  an  e-mail  introduced  as 
evidence  by  the  states,  Borduin 
summed  up  San  Rafael,  Calif.- 
based  Autodesk’s  frustration 
with  a  quote  from  an  engineer 
at  his  firm:  “Our  wholehearted 


Despite  Favorable  Vote  Tally, 
HP/Compaq  Hurdles  Remain 


Firms  face  complex 
integration  process 


BY  JAIKUMAR  VIJAYAN 

Walter  Hewlett’s  determina¬ 
tion  to  legally  contest  Hewlett- 
Packard  Co.’s  merger  with 
Compaq  Computer  Corp.  de¬ 
spite  an  initial  vote  tally  favor¬ 
ing  the  union  needlessly  com¬ 
plicates  an  already  complicat¬ 
ed  situation,  analysts  said. 

HP  last  week  announced  that 
shareholders  had  approved  the 
merger  by  a  margin  of  about 
45  million  shares  out  of  1.6  bil- 


The  Tally 

Out  of  1.63  billion  shares: 

Votes  FOR  the  merger: 

837.9M _ 

Votes  AGAINST  the  merger: 

792.6M 


lion.  The  company  cited  pre¬ 
liminary  voting  results  tabulat¬ 
ed  by  Newark,  Del.-based  inde¬ 
pendent  vote-counting  Firm  IVS 
Associates  Inc. 

In  releasing  the  results,  em¬ 
battled  HP  CEO  Carly  Fiorina 
reiterated  her  plans  to  go  ahead 
with  the  merger  without  delay. 
“We  are  eager  to  put  this  diffi¬ 
cult  period  behind  us  and  look 
forward  to  doing  business  as 
the  new  HP,”  Fiorina  said. 

But  Hewlett,  who  filed  suit 
against  HP  in  March  alleging 
that  the  company  had  coerced 
Frankfurt-based  Deutsche  Bank 
AG  to  switch  17  million  votes  in 
favor  of  the  merger,  insisted  he 
would  continue  with  the  litiga¬ 
tion.  “These  are  preliminary  re¬ 
sults,  and  both  sides  will  have 
the  opportunity  to  examine  and 
challenge  the  proxy  tabulation 
prior  to  Final  certiFication,”  he 
said  in  a  statement. 

But  even  if  Hewlett  were 
able  to  convince  the  Delaware 
Chancery  Court  of  discarding 
the  contested  votes,  HP  would 


AT  A  GLANCE 


Halfway  Point 

Microsoft  began  presenting  its 
case  last  week. 

WITNESSES:  Microsoft  could  present  up  to 
30  witnesses,  vs.  15  for  the  states,  but  many 
will  be  on  the  stand  for  only  a  few  hours. 


TIME  FRAME:  Each  side  gets  100  hours  to 
make  its  case.  The  hearing  is  expected  to 
continue  well  into  next  month. 


THE  JUDGE:  Judge  Colleen  Kollar-Kotelly 
must  still  decide  whether  to  accept  the  set¬ 
tlement  reached  by  the  U.S.  Justice  Depart¬ 
ment  and  nine  of  the  18  states  that  filed  suit 
against  Microsoft,  as  well  as  determine 
whether  the  nonsettling  states  have  made 
a  case  for  tougher  remedies. 

support  of  Microsoft  is  grossly 
misplaced.  This  is  a  company 
that  will  screw  anybody  at  the 
drop  of  a  hat.”  ► 


Cara  Garretson  of  the  IDG 
News  Service  contributed 
to  this  story. 


still  have  enough  of  a  margin  to 
approve  the  merger,  said 
Charles  King,  an  analyst  at 
Sageza  Group  Inc.  in  Mountain 
View,  Calif.  “To  understand 
what  he  is  up  to  now  would  [re¬ 
quire]  a  Ouija  board,”  King  said. 

By  continuing  to  challenge 
the  merger,  Hewlett  is  only  dis¬ 
rupting  the  integration  proc¬ 
ess,  King  said.  “This  is  a  tough 
merger  under  any  circum¬ 
stances.  But  if  [HP’s  manage¬ 
ment]  is  subject  to  constant 
legal  threats,  it’s  only  going  to 
get  tougher,”  he  said. 

“This  has  gone  on  for  far  too 
long”  and  could  soon  start 
hurting  both  HP  and  Compaq 
in  the  market,  warned  Richard 
Partridge,  an  analyst  at  D.H. 
Brown  Associates  Inc.  in  Port 
Chester,  N.Y. 

So  far,  “HP  hasn’t  lost  a  lot, 
because  the  economy  has  been 
slow  and  there  hasn’t  been  a 
lot  of  [purchasing],”  Partridge 
said.  But  that  could  change  as 
the  market  recovers,  he  said. 
“They  have  to  execute  on  their 
promise  of  hitting  the  ramp 
running,”  he  said.  I 

For  ongoing 

VJUlLiV  coverage  of  the 
T  lirl/ft  FlP/Compaq  merger, 
1— JJ.  ll\\"  visit  our  Web  site: 

www.computerworld.com/q?a1650 
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Microsoft  Exec:  Windows  limeline  Could  Slip 

Allchin  says  he  expects  .Net  Server  next 

year ,  follow-on  release  ‘beyond  2003 ’ 


BY  CAROL  SLIWA 

Microsoft  Corp.  last  week  said 
that  the  upcoming  Windows 
.Net  Server  operating  system 
probably  won’t  reach  cus¬ 
tomers’  hands  until  next  year 
and  that  its  successor  will  ap¬ 
pear  “beyond  2003.” 

Those  predictions,  made  by 
Microsoft  Group  Vice  Presi¬ 
dent  Jim  Allchin  at  the  Win¬ 
dows  Hardware  Engineering 
Conference  in  Seattle  last 
week,  suggest  that  future  Win¬ 
dows  releases  may  ship  later 
than  the  company  anticipated. 

Microsoft  officials  last  fall 
said  the  planned  successor  to 
Windows  .Net  Server  and 
Windows  XP  —  code-named 
Longhorn  —  would  ship  in 
2003.  But  some  analysts  last 
week  predicted  that  the  server 
versions  of  Longhorn  won’t 
ship  until  2005. 

Rob  Enderle,  an  analyst  at 
Giga  Information  Group  Inc.  in 
Cambridge,  Mass.,  said  that  he 
modified  his  forecasted  ship¬ 
ment  dates  for  Longhorn  after 
learning  that  the  operating  sys¬ 
tem  had  shifted  from  a  minor 
to  a  major  release.  He  said  he 
expects  the  Longhorn  desktop 
operating  system  to  emerge  in 
the  second  half  of  2004,  with 
the  server  versions  making 
their  debut  in  mid-2005. 

“Some  [corporate  users] 
were  thinking  they  were  going 
to  wait  for  Longhorn  because  it 
was  a  minor  release,  and  2003 
seemed  like  it  was  relatively 
close,”  Enderle  said.  “Now  it’s 
slipped  to  2004,  and  that’s  a 
long  time  to  wait.” 

Gartner  Inc.  in  Stamford, 
Conn.,  has  given  the  Long¬ 
horn  server  operating  system  a 
40%  chance  of  shipping  in 
2004  and  a  60%  likelihood  for 
2005,  analyst  Tom  Bittman  said. 

Bittman  said  he  also  found  it 
telling  that  Allchin  said  Win¬ 
dows  .Net  Server  probably 
won’t  reach  customers’  hands 
until  2003.  He  said  he  had  ex¬ 
pected  the  server  operating 
system  to  be  released  to  manu¬ 


facturing  (RTM)  this  Septem¬ 
ber  or  October,  meaning  it 
could  reach  customers  by 
year’s  end. 

Instead,  Allchin’s  predictions 
suggest  the  RTM  date  could  be 
later  than  Bittman  expected  —  a 
big  slip  in  his  view,  Bittman  said. 

A  Continuing  Trend 

Further  slippage  certainly 
wouldn’t  be  unprecedented  for 
the  new  Windows  server  oper¬ 
ating  system,  which  was  origi¬ 
nally  slated  to  ship  at  the  same 
time  as  the  Windows  XP  desk¬ 
top  software.  Windows  XP 
shipped  last  October,  but  the 
server  operating  system’s  ship 
date  slid  to  the  first  half  of  this 
year  and  later  to  the  second 


BY  JAIKUMAR  VIJAYAN 

Problems  with  the  consumer 
version  of  an  online  extension 
to  Windows  that’s  aimed  at 
making  patch  installation  easi¬ 
er  are  prompting  concerns 
about  the  reliability  of  an  up¬ 
coming  corporate  release  of 
the  Microsoft  Corp.  technology. 

But  Steve  Lipner,  Microsoft’s 
director  of  security,  claimed 
last  week  that  the  concerns  are 
misplaced  and  said  that  the 
corporate  version  of  the  Win¬ 
dows  Update  technology  is 
working  fine  in  beta-test  trials. 

Russ  Cooper,  moderator  of 
NTBugtraq,  an  online  mailing 
list  covering  Windows  NT  se¬ 
curity,  advised  users  to  stop  us¬ 
ing  Windows  Update  for  down¬ 
loading  patches,  claiming  that 
it’s  unreliable. 

Windows  Update  is  basical¬ 
ly  designed  to  give  users  a  way 
to  quickly  locate  and  download 
software  patches  for  fixing  se¬ 
curity  vulnerabilities  on  indi¬ 
vidual  systems. 


half  of  the  year. 

One  reason  Microsoft  has 
cited  for  the  delays  is  the  secu¬ 
rity  review  it’s  undertaking  as 
part  of  its  Trustworthy  Com¬ 
puting  initiative.  The  company 
last  week  declined  to  comment 
on  other  reasons  for  the  slip¬ 
page,  but  some  analysts  said 
Microsoft  has  faced  challenges 
building  its  .Net  framework 
into  the  operating  system. 

Corporate  users  who  were 
waiting  for  Windows  .Net  Serv¬ 
er  to  take  advantage  of  its  Ac¬ 
tive  Directory  improvements 
may  not  want  to  wait.  Bittman 
said  that  even  if  the  product 
ships  in  early  2003,  users  should 
wait  four  or  five  months  for  the 
new  features  to  stabilize. 

Jeff  Ratner,  assistant  vice 
president  of  IT  infrastructure 
at  Phoenix  Home  Life  Mutual 
Insurance  Co.  in  Enfield,  Conn., 
said  his  firm  planned  a  move  to 


Cooper  said  it’s  dangerous 
for  users  to  rely  on  the  technol¬ 
ogy  for  several  reasons. 

For  instance,  sometimes  the 
Windows  Update  Web  site  in¬ 
forms  users  that  they’re  ade¬ 
quately  patched  when  in  fact 
they  aren’t,  he  said.  At  other 
times,  it  asks  them  to  patch 


Update  Downsides 

Critics  charge  that  Micro¬ 
soft’s  Windows  Update: 

■  Can’t  be  trusted  to  always 
display  the  most  current 
and  updated  versions  of 
software  patches. 

■  May  cause  users  to  waste 

time  downloading  patch 
components  that  have 
already  been  installed. 

■  Doesn’t  always  report  when 
a  patch  installation  fails. 

■  Doesn’t  verify  what  it  has 
installed. 


Windows 
Ship  Dates 


DESKTOP  OPERATING 
SYSTEMS 

Windows  2000  Feb.  2000 
Windows  XP  October  2001 
Longhorn  Expected  2004 

SERVER  OPERATING 
SYSTEMS 

Windows  2000  Feb.  2000 
Windows  .Net  Server 

Expected  2003 
Longhorn  Expected  2004 

Note:  Ship  dates  indicate  when  the  product 
:  is  expected  to  become  generally  available  to 
customers. 

1 

Active  Directory  more  than  a 
year  ago  and  has  no  intention  of 
changing  its  decision  to  go  with 
the  Windows  2000  server  oper¬ 
ating  system.  Ratner  added  that 
the  company  decided  to  up- 


systems  that  have  already  been 
patched,  or  it  doesn’t  install  a 
patch  fully,  Cooper  claimed. 
Windows  Update’s  method  of 
determining  successful  patch 
installation  can’t  be  trusted  ei¬ 
ther,  he  added. 

Susan  Bradley,  a  Microsoft 
Certified  Professional  and  cer¬ 
tified  public  accountant  at 
Tamiyasu,  Smith,  Horn  and 
Braun  Accountancy  Corp.  in 
Fresno,  Calif.,  said  she  recom¬ 
mends  that  network  adminis¬ 
trators  not  use  Windows  Up¬ 
date  for  security  patches.  How¬ 
ever,  “there  are  certain  critical 
hot  fixes  that  are  not  security- 
related  but  still  needed,”  she 
added.  “It  is  very  easy  to  down¬ 
load  these  for  the  XP  machines 
[using  Windows  Update].” 

Microsoft  plans  to  release  the 
corporate  edition  of  Windows 
Update  later  this  quarter.  The 
technology  is  being  introduced 
as  part  of  the  company’s  Strate¬ 
gic  Technology  Protection  Pro¬ 
gram  announced  last  fall. 

The  corporate  version  will 
not  only  dynamically  alert 
companies  of  new  patches,  but 
it  will  also  give  them  a  way  to 
more  efficiently  manage  and 
distribute  patches  across  their 
networks,  Lipner  said. 


Critics  Say  Microsoft  Patch 
Download  Site  Ik  Faults 
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grade  to  Windows  XP  desktops, 
knowing  that  Longhorn  would 
be  delayed.  “We  can  stay  on  this 
for  five  or  six  years  without 
having  to  move  off,”  he  said. 

Jon  Dell’Antonia,  vice  presi¬ 
dent  of  IT  at  OshKosh  B’Gosh 
Inc.  in  Oshkosh,  Wis.,  said  his 
company  is  using  Windows 
2000  for  new  servers  and  also 
has  Windows  2000  on  the 
desktop.  He  said  the  Microsoft 
delays  “will  probably  just  make 
that  a  better  decision.” 

Dell’Antonia  added  that 
longer  product  life  cycles  tend 
to  help  OshKosh  B’Gosh,  be¬ 
cause  “it  takes  a  while  to  roll 
out  any  new  operating  system.” 

Wayne  Richards,  a  senior 
technical  support  analyst  at 
Goodyear  Tire  &  Rubber  Co. 
in  Akron,  Ohio,  said  that  none 
of  the  schedule  changes  will 
affect  his  company,  because 
the  downturn  in  the  economy 
has  slowed  Goodyear’s  up¬ 
grade  plans,  as  it  has  for  many 
other  firms.  I 


Cooper  said  the  problem  is 
that  the  two  versions  are  based 
on  the  same  technology,  so 
whatever  the  consumer  ver¬ 
sion  of  Windows  Update  does, 
the  corporate  edition  does  too, 
“and  in  the  same  way.” 

Microsoft  is  also  working  on 
streamlining  its  patch  releas¬ 
ing  process,  Lipner  said.  Cur¬ 
rently,  patches  are  available 
from  myriad  sources  and  ser¬ 
vices,  which  at  times  yield  con¬ 
flicting  information.  “We  know 
there  are  issues,  and  this  is 
something  that  we  are  certain¬ 
ly  working  on  fixing,”  Lipner 
said.  “This  is  not  something  we 
can  wave  a  magic  wand  over.” 

Pete  Lindstrom,  an  analyst  at 
Framingham,  Mass.-based  Hur- 
witz  Group  Inc.,  said  these  are 
issues  that  Microsoft  is  aware 
of  and  has  been  trying  to  ad¬ 
dress  for  some  time  now. 

“I  think  they  worked  hard  to 
facilitate  [the  patching  proc¬ 
ess].  But  there’s  so  little  trust 
on  the  users’  part  that  most  [of 
this  effort]  has  been  unrecog¬ 
nized,”  Lindstrom  said. ) 

(  ^1  IT/  *1/  f°r  the  latest  IT 
VA  siLiv  security  news, 

T  ini  >  visi!  our  Security 
Ul  ilV%n  Knowledge  Center: 

www.computerworld.com/q7k1600 
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License  Bill  Could 
Create  IT  Headaches 

Compatibility  issues  could  cost  businesses 
millions  if  driver’s  licenses  are  standardized 


BY  PATRICK  THIBODEAU 

WASHINGTON 

ONGRESS  THIS 
week  is  expected 
to  consider  leg¬ 
islation  requir¬ 
ing  national  uni¬ 
form  standards  for  driver’s  li¬ 
censes.  The  intent  is  to  improve 
security,  an  issue  of  importance 
to  businesses  that  swipe  or  scan 
driver’s  licenses  to  authenticate 
customers. 

But  creating  a  driver’s  license 
standard  would  require  law  en¬ 
forcement  agencies  and  busi¬ 
nesses  such  as  airlines  and  con¬ 
venience  stores  to  adopt  com¬ 
mon  scanning  and  identifi¬ 
cation  systems  to  proof  the 
licenses,  and  the  trickle-down 
effect  could  be  costly  to  both 


the  public  and  private  sectors. 

For  instance,  the  Food  Mar¬ 
keting  Institute  in  Washington, 
which  represents  some  26,000 
retail  food  stores,  estimated 
that  changes  in  the  magnetic 
stripe  standard  alone  could 
cost  its  supermarket  retailers 
$175  million  in  upgrade  costs. 


In  the  meantime,  “if  you  go 
straight  to  [adopting  a]  smart 
card,  you  are  going  to  leave 
millions  of  terminals  at  cash 
registers  and  airline  counters 
unable  to  read  the  card,”  said 
Richard  Varn,  CIO  for  the  state 
of  Iowa  and  one  of  the  leaders 
in  the  state’s  effort  to  improve 
driver’s  license  security.  That 
would  be  a  mistake,  he  said. 


“You  don’t  want  to  end  up 
with  a  counter  full  of  readers 
for  different  state  cards,  so  you 
have  to  work  on  standards  and 
interoperability,”  said  Varn. 

Key  to  a  successful  authenti¬ 
cation  system  will  be  back-end 
databases  with  reliable  infor¬ 
mation  maintained  by  state 
and  federal  authorities  that 
businesses  can  access,  Varn 
said.  “A  dumb  card  with  smart 
networks  and  good  databases 
can  do  just  as  well  as  a  smart 
card,”  he  said. 

Legislation  being  finalized 
by  U.S.  Sen.  Richard  “Dick” 
Durbin  (D-Ill.),  chairman  of  the 
Senate  Subcommittee  on  Over¬ 
sight  of  Government  Manage¬ 
ment,  would  require  states  to 
develop  a  minimum  verifica¬ 
tion  and  identification  stan¬ 
dard.  It  also  seeks  unique  iden¬ 
tifiers  encoded  in  each  license. 

If  Congress  passes  the  bill, 
law  enforcement  officials  and 


Security-Driven 


Congress  is  expected  to 
receive  a  bill  this  week 
seeking  national  standards 
for  driver’s  licenses. 

MOTIVE:  Eight  of  the  terror¬ 
ists  aboard  hijacked  airliners 
Sept.  11  had  fraudulently 
obtained  identification. 

PRIVACY  ISSUE:  National 
standards  could  lead  to  re¬ 
strictions  on  data  collected 
from  licenses. 

TECHNOLOGY  IMPACT: 

A  standard  license  would 
force  states  and  businesses  to 
adopt  standard  technologies 
to  scan  and  identify  cards. 

businesses  would  then  have 
three  years  to  adopt  the  neces¬ 
sary  technologies  to  scan  and 
identify  the  licenses. 

While  there’s  no  standard  for 
driver’s  licenses,  the  magnetic 
strip  is  the  most  frequently 
used  technology.  But  some 
states  are  using  2-D  or  3-D  bar 
codes,  and  others  are  eyeing 
smart  cards. 

John  Hervey,  chief  technical 
officer  at  the  Alexandria,  Va.- 
based  National  Association  of 


Convenience  Stores  (NACS), 
said  his  biggest  concern  is 
backward  compatibility  with 
existing  systems. 

Many  retailers,  including  the 
130,000  stores  represented  by 
the  NACS,  use  magnetic  strip 
readers  for  everything  from 
credit  cards  to  driver’s  licens¬ 
es.  Changing  those  systems 
would  cost  millions  of  dollars, 
Hervey  said. 

“I  don’t  think  you  can  do 
away  with  mag  stripe  technol¬ 
ogy  immediately,”  said  Hervey, 
who  believes  that  a  driver’s  li¬ 
cense  could  incorporate  multi¬ 
ple  technologies  that  could  sat¬ 
isfy  magnetic  strips  as  well  as 
bar  code  readers. 

Privacy  issues  will  also  be 
significant.  By  swiping  driver’s 
licenses,  a  business  can  cap¬ 
ture  that  data  and  use  it  for 
customer  relationship  man¬ 
agement,  which  scares  some 
privacy  advocates.  Putting  lim¬ 
its  on  what  businesses  can  do 
with  that  data  will  likely  be 
part  of  the  debate.  > 

Oi  IlfMT  For  more  govern- 
V/UlLi\  ment-related  news 
T  inlzIX  and  resources,  visit 
1  II  our  Web  site. 

www.computerworld.com/q7s1300 


Health  Care  Group:  Lack 
Of  IT  Leads  to  Deaths 


Patient  care  data 

still  handwritten 


BY  BOB  BREWIN 

BOSTON 

Despite  annual  revenue  of  $1.3 
trillion,  or  14%  of  the  gross  na¬ 
tional  product,  the  U.S.  health 
care  industry’s  use  of  IT  is 
outmoded  and  endangers  pa¬ 
tients’  lives,  according  to  doc¬ 
tors,  health  plan  administra¬ 
tors,  analysts  and  health  care 
IT  managers. 

While  health  care  tops  the 
nation’s  industries  in  revenue, 
“medical  records  are  scraps 
of  paper,”  said  Dr.  Harris  Ber¬ 
man,  CEO  of  Tufts  Associated 
Health  Plans  Inc.  in  Waltham, 
Mass.  “And  99%  of  them  are 


handwritten,”  added  Berman, 
who  spoke  at  the  annual  Gart¬ 
ner  Healthcare  Business  and 
IT  Summit  here  last  week. 

Physicians’  notoriously  bad 
handwriting  is  no  joke  either, 
said  Dr.  Arnie  Milstein,  medical 
director  at  the  Pacific  Business 
Group  on  Health.  The  San  Fran¬ 
cisco-based  organization  repre¬ 
sents  large  California  employ¬ 
ers,  which  collectively  spend  $3 
billion  a  year  on  health  care. 
Milstein  said  the  lack  of  wide¬ 
spread  use  of  computer  physi¬ 
cian  order  entry  (CPOE)  sys¬ 
tems  “kills  people.” 

Milstein  is  a  founder  and  key 
backer  of  The  Leapfrog  Group, 
a  Washington-based  health 
care  consortium  that  is  push¬ 
ing  adoption  of  CPOE.  The 
group  was  started  in  2000  by 


The  Business  Roundtable,  a 
Washington-based  organiza¬ 
tion  that  draws  its  membership 
from  the  CEOs  of  Fortune  500 
companies.  According  to  Mil¬ 
stein,  CPOE  systems  would 
“eliminate  half  a  million  med¬ 
ical  errors  a  year.” 

CPOE  could  ensure,  among 
other  things,  that  the  right 
drug  is  delivered  to  the  right 
patient,  with  built-in  alarms 
to  indicate  any  allergic  reac¬ 
tion.  Leapfrog  estimates  that 
“98,000  people  die  each  year 


JUST  THE  FACTS 


A  Paper 
Tragedy 

The  bottom  line  of  paper-based 
health  care: 

■  More  deaths  in  hospitals  result  from 
medical  errors  than  from  auto  acci¬ 
dents,  breast  cancer  or  AIDS. 

■  Medical  errors  can  lead  to  permanent 
disabilities,  extended  hospital  stays  and 
expensive  additional  treatments. 

SOURCE  THE  LEAPFROG  GROUP.  WASHINGTON 


in  America’s  hospitals  as  a  re¬ 
sult  of  medical  mistakes  that 
are  preventable.” 

Berman  said  the  slow  adop¬ 
tion  of  IT  systems  by  the  med¬ 
ical  community  isn’t  due  to 
lack  of  availability.  “The  tech¬ 
nology  is  out  there;  we  just 
have  to  drag  the  medical  com¬ 
munity  to  use  it,”  he  said. 

CPOE  Incentives 

Leapfrog  intends  to  use  the 
purchasing  power  of  its  90 
major  U.S.  employers  to  push 
adoption  of  CPOE  by  compen¬ 
sating  hospitals  that  adopt  the 
system  with  more  referrals  and 
higher  fees,  according  to  Mil¬ 
stein.  The  idea  is  to  reward 
excellence  in  health  care  in  the 
same  way  that  General  Motors 
Corp.  rewards  its  quality  sup¬ 
pliers  with  large  contracts. 

Leapfrog  wants  the  approxi¬ 
mately  1,000  major  urban  and 
suburban  hospitals  that  have 
joined  its  program  to  start 
using  CPOE  quickly,  with  a 
deadline  of  Dec.  31,  2004  —  a 


daunting  task,  said  Milstein, 
considering  the  state  of  IT  in 
the  health  care  industry. 

In  fact,  Dr.  Rocky  Fredrick¬ 
son,  associate  chief  medical 
officer  at  Seattle-based  Provi¬ 
dence  Health  System,  said  he 
finds  that  deadline  impossible 
to  meet. 

“It’s  not  going  to  happen,” 
Fredrickson  said,  primarily 
because  “no  off-the-shelf  CPOE 
system  exists  today.”  A  time 
frame  of  2007  to  2010  is  a  more 
realistic  goal  for  CPOE,  he  said. 

The  key  problem  with  CPOE, 
Fredrickson  said,  is  that  physi¬ 
cians  are  independent;  they 
don’t  work  for  hospitals,  and 
they  are  loath  to  adopt  any  sys¬ 
tem  that’s  seen  as  bureaucratic. 
Using  CPOE  will  “slow  [doc¬ 
tors]  down,”  he  said.  “You  can’t 
sell  it  on  convenience.  You  have 
to  sell  it  on  patient  safety.”  • 

|  j  r\z  F°r  more  about  the 
WLUL.IV  Issues  involved  in 
T  itqL|\  physicians’ adoption  of 
1  vll  UVm^  key  technologies,  visit: 

www.computerworld.com/q?29117 
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“OracleSh  JDeveloper  is  one  of  the 
most  responsive,  complete  and 
best  integrated  Java  development 
environments  that  we’ve  seen.” 

BWEEK 

THE  ENTERPRISE  NEWSWEEKLY 

/  ,„M.  g!  .V?  ■'%  »- 

“For  the  full  development,  debug¬ 
ging,  tuning,  and  development 
of.. .Java-based  applications  for 
complex  corporate  applications, 
I’ve  not  seen  better.” 

jAVAPro 


“Oracle’s  goal  is  nothing  less  than 
providing  the  Java  developer  with 
a  single  soup-to-nuts  environment 
for  everything  from  UML 
modeling  to  J2EE  deployment.” 

.software 

development 


“JDeveloper  is  a  clear  winner.” 


&  WEB  SERVICES 


If  you  want  the  best  Java  integrated  development  environment, 

you  have  to  be  willing  to  spend  less. 
(Or  download  for  free,  but  don't  tell  anybody.) 


oracle.com/ad/jdev995 
or  call  1.800.633.1072 
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Weak  IT  Spending 
Hurts  Microsoft 

Microsoft  Corp.  reported  revenue  of 
S7.25  billion  for  its  third  quarter 
ended  March  31,  up  13%  from  the 
year-earlier  level  of  S6.4  billion.  But 
sales  were  below  earlier  expecta¬ 
tions,  and  John  Connors,  Micro¬ 
soft’s  chief  financial  officer,  said 
fourth-quarter  revenue  will  likely 
drop  to  about  $7  billion.  “IT  spend¬ 
ing  levels  are  simply  lower  than  we 
had  expected,”  Connors  said. 

Sun  Takes  Q3  Loss, 
Plans  More  Cuts 

Sun  Microsystems  Inc.  also  cited 
continued  reductions  in  IT  spending 
when  it  reported  a  S37  million  loss 
for  its  third  quarter  ended  March  31. 
Revenue  totaled  S3.1  billion,  down 
24%  from  S4.1  billion  in  the  same 
period  a  year  ago.  Sun,  which  laid 
off  4,000  workers  last  fall,  said  it 
will  cut  another  1,000  jobs  during 
the  next  six  to  nine  months. 


Hitachi  Strikes  Back 
At  EMC  With  Suit 

A  week  after  being  accused  of  in¬ 
fringing  on  six  storage  management 
patents  held  by  EMC  Corp.,  Tokyo- 
based  Hitachi  Ltd.  denied  the  claims 
and  filed  a  lawsuit  in  U.S.  District 
Court  charging  that  EMC  has  in¬ 
fringed  on  eight  of  its  patents.  Hop- 
kinton,  Mass.-based  EMC  said  it 
would  review  Hitachi’s  allegations  be¬ 
fore  commenting  on  them  specifically. 

Short  Takes 

SWISS,  the  Zurich-based  succes¬ 
sor  to  bankrupt  airline  SWISSAIR 
GROUP,  signed  a  series  of  IT  out¬ 
sourcing  deals  valued  at  about 
$200  million  with  Plano,  Texas- 
based  ELECTRONIC  DATA  SYS¬ 
TEMS  CORP. ...  The  WORLD  WIDE 
WEB  CONSORTIUM  officially  en¬ 
dorsed  the  Platform  for  Privacy 
Preferences  1.0  specification, 
known  as  P3P,  for  use  on  Web 
sites  and  in  browsers. 


Proposed  Regs  Could  Make 
Banks  Boost  IT  Spending 


Databases,  reporting  systems  to  meet  risk 
management  standards  could  cost  millions 


BY  LUCAS  MEARIAN 

roposed  changes 
to  international  re¬ 
porting  regulations 
could  compel  banks 
to  spend  perhaps 
tens  of  millions  of  dollars  on 
technology  over  the  next  sev¬ 
eral  years. 

The  purpose  of  the  regula¬ 
tions  is  to  gather  data  and  cre¬ 
ate  credit  and  opera¬ 
tional  risk  manage¬ 
ment  models  for  gov¬ 
ernment  oversight. 

But  there  could  be  a 
lot  of  resistance,  based  on  pre¬ 
liminary  feedback  from  senior 
banking  executives  and  IT 
managers. 

The  forthcoming  Basel  Capi¬ 
tal  Accord  is  expected  to  be  fi¬ 
nalized  by  the  Bank  for  Inter¬ 
national  Settlements  (BIS)  in 
Basel,  Switzerland,  by  the  end 
of  this  year.  Some  organiza¬ 
tions  may  then  be  faced  with 
building  out  databases,  report¬ 
ing  systems  and  integration 


technologies  —  such  as  extrac¬ 
tion,  transformation  and  load¬ 
ing  technologies  —  to  take  ad¬ 
vantage  of  proposed  risk  man¬ 
agement  standards,  accord¬ 
ing  to  a  report  released  earlier 
this  month  by  Meridien  Re¬ 
search  Inc.  in  Newton,  Mass. 

Unlike  current  regulations, 
the  new  accord  addresses  re¬ 
quirements  for  information 
systems  and  will  like¬ 
ly  require  banks  to 
set  aside  capital  for 
operational  risks  —  a 
first  for  the  industry, 
according  to  the  report.  While 
many  major  financial  institu¬ 
tions  throughout  the  world 
have  enterprise  risk  systems  in 
place,  “few  of  those  systems 
are  capable  of  automatically 
generating  regulatory  report¬ 
ing,”  Meridien’s  report  states. 

First  Interstate  BancSystem 
Inc.,  a  commercial  lender  in 
Billings,  Mont.,  uses  a  manually 
intensive  process  to  determine 
credit  ratings.  The  process 


F  NANCIAL 
SERVICES 


Regulatory  Impact 

The  technology  required  to  create  operational  risk  models  under  the 
proposed  Basel  Capital  Accord  are  similar  to  what  credit  risk  systems 
use.  It  will  be  focused  around  data  aggregation  and  management  tools. 

Data  Tracking  &  Analysis  Reporting 

Collection  Monitoring 


NOTE:  The  portions  of  the  architecture  most  impacted  by  the  BIS  recommendations  are  shaded. 


would  have  to  be  automated  at 
great  expense  to  take  advan¬ 
tage  of  the  new  provisions,  said 
Jonathan  Scott,  Internet  ser¬ 
vice  project  leader  at  the  bank. 

According  to  Scott,  a  credit 
reviewer  goes  through  all  of  the 
files  related  to  a  customer  to 
understand  the  risk  of  extend¬ 
ing  a  credit  or  loan  to  him.  That 
information  is  then  tied  back  to 
software  that  does  credit  scor¬ 
ing.  “But  that’s  not  automated, 
and  it  doesn’t  upload  into  our 
databases,”  said  Scott. 

He  noted  that  in  his  view,  the 
BIS  proposal  offers  few  incen¬ 
tives  to  build  a  more  automat¬ 
ed  and  centralized  internal 
credit  and  operational  risk 
evaluation  system. 

Biding  Their  Time 

The  BIS’s  recommendations 
are  expected  to  be  adopted  by 
international  regulators  some¬ 
time  around  2006.  Because 
that’s  still  four  years  off,  many 
IT  managers  and  business  ex¬ 
ecutives  believe  there’s  no 
rush  to  build  systems  for  track¬ 
ing  and  reporting  credit  and 
operational  risks,  said  Debbie 
Williams,  research  director 
and  co-founder  of  Meridien. 
Big  mistake,  she  said. 

“It  could  very  well  take  the 
next  four  years  to  get  [all  of  the 
needed  systems]  in  place,” 
Williams  said.  “It’s  not  just  a 
question  of  creating  a  database 
and  populating  it.  This  could 
mean  a  change  in  business 
practices  as  well.” 

The  BIS  coordinates  regula¬ 
tions  in  financial  services.  Its 
board  makes  recommendations 
on  industry  rules,  which  are 
then  adopted  by  regulators  in 
the  U.S.  and  around  the  world. 

In  January  2001,  the  BIS’s 
Basel  Committee  on  Banking 
Supervision  issued  a  proposal 
for  a  new  Capital  Accord.  Once 
finalized,  it  will  replace  one  is¬ 
sued  in  1988  that  required 
banks  to  set  aside  at  least  8%  of 
their  capital  to  cover  their 
credit  risks  even  if  some  loans 


It  could  very  well 
take  the  next  four 
years  to  get  [all  of 
the  needed  sys¬ 
tems]  in  place. 

DEBBIE  WILLIAMS,  RESEARCH 
DIRECTOR.  MERIDIEN  RESEARCH 

were  less  risky  than  others. 

The  new  accord  offers  banks 
an  opportunity  to  create  a 
tiered,  internal  ratings-based 
model  that  many  firms  already 
use.  The  new  reporting  model 
allows  them  to  set  aside  less 
capital,  based  on  a  customer’s 
credit  ratings  and  other  factors. 

In  a  comment  submitted  to 
the  BIS  Web  site,  Charlotte, 
N.C.-based  Bank  of  America 
Corp.’s  chief  financial  officer, 
James  Hance  Jr.,  called  the 
proposal  “costly  to  imple¬ 
ment,”  adding  that  there’s  little 
incentive  for  banks  to  adopt 
the  internal  model. 

“Since  the  methodologies 
and  databases  for  measuring 
operational  risk  are  still  in  a 
nascent  state  of  development, 
we  believe  most  banks  will  use 
the  standardized  approach  for 
operational  risk  for  the  inter¬ 
mediate  term,”  Hance  wrote.  I 

/A  •  1  Hundreds  of  financial 

1/U2CK  services  firms  have 
1  submitted  opinions  on 

I  JIT  Kit?  the  new  Basel  Capital 
Accord  proposal,  many 
of  them  bemoaning  it  as  a  vague,  costly 
undertaking  with  few  incentives.  To  read 
these  reactions  and  connect  with  other 
BIS-related  sites,  see  the  following: 

■  An  overview  of  the  new  Basel 
Capital  Accord: 

www.computerworld.com/q7a1850 

■  An  explanatory  note  from  the  Basel 
Committee  on  the  new  accord: 

www.computerworld.com/q7a1860 

■  Industry  commentary  on  the  new 
Basel  Capital  Accord  proposal: 

www.computerworld.com/q7a1840 
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U  S.  Army  to  Centralize 

Network  Security  Scanning 
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Aims  to  preempt  threats  with  vulnerability 
detection,  automated  patch  management 


BY  DAN  VERTON 

The  u.s.  army  last 
week  announced  a 
major  new  initia¬ 
tive  designed  to 
help  the  service 
get  its  arms  around  vulnerabil¬ 
ity  analysis  and  automated 
patch  management  for  more 
than  1.5  million  workstations 
around  the  world. 

Through  a  multimillion- 
dollar  contract  with  Melbourne, 
Fla.-based  Harris  Corp.,  the 
Army  will  deploy  the  compa¬ 
ny’s  Security  Threat  Avoid¬ 
ance  Technology  (STAT)  Scan¬ 
ner  vulnerability  assessment 
tool  worldwide,  including  in  all 
post,  camp  and  station  net¬ 
works,  tactical  networks,  mo¬ 
bile  subscriber  networks  and 
the  Army  Tactical  Internet. 

The  Harris  tool  is  the  latest 
addition  to  a  group  of  scanning 
tools  that  the  Army  uses,  said 
Patrick  Swan,  a  spokesman  for 
the  Army’s  CIO  office. 


Defense  in  Depth 


“Our  goal  is  to  automate  as 
much  as  we  can  to  allow  sys¬ 
tems  administrators  to  concen¬ 
trate  on  the  many  other  things 
that  they  are  required  to  do,” 
said  Swan.  He  added  that  part 
of  the  goal  of  the  Harris  de¬ 
ployment  is  to  centralize  glob¬ 
al  monitoring  at  the  Pentagon 
to  provide  an  overall  view  of 
the  Army’s  global  network  risk 
posture.  “Our  approach  is  a  de¬ 
fense  in  depth  using  many  dif¬ 
ferent  tools,”  he  said. 

Word  of  the  Army  program 
comes  as  the  SANS  Institute,  a 
Bethesda,  Md.-based  research 
organization  for  systems  ad¬ 
ministrators  and  security  man- 

For  access  to  addi- 
- -  tional  resources. 

(N  Jt  visit  our  Security 

-  Ji  Knowledge  Center, 

www  conijHiierworld.com/q7k1600 


agers,  is  close  to  completing  a 
“consensus  list”  of  the  highest- 
priority  vulnerabilities  detect¬ 
ed  by  the  most  popular  auto¬ 
mated  scanning  systems.  The 
tools  include  those  offered  by 
Internet  Security  Systems  Inc. 
(ISS)  in  Atlanta;  Symantec 
Corp.  in  Cupertino,  Calif.;  and 
the  National  Institute  of 
Standards  and  Technology  in 
Gaithersburg,  Md.,  as  well  as 
Nessus  shareware.  Harris’ 
STAT  Scanner  hasn’t  been 
added  yet  but  likely  will  be  in 
the  near  future,  said  Alan 


Paller,  director  of  SANS. 

“The  shortcut  to  improved 
security  [is]  universal,  repeat- 
able  monitoring,”  said  Paller, 
adding  that  NASA  uses  ISS 
Scanner  to  keep  tabs  on  vul¬ 
nerabilities.  “The  Army  is  now 
trying  Harris  STAT.  The  big 
difference  is  that  NASA  picked 
the  most  critical  vulnerabili¬ 
ties  rather  than  looking  at  all 
2,000.  The  latter  always  leads 
to  overload  and  lack  of  action. 
NASA’s  approach  works.” 

SANS  is  also  working  on 
a  site  certification  program 
based  on  the  consensus  vul¬ 
nerability  list,  Paller  said. 
Weekly  updates  will  make  the 
service  “enormously  useful”  to 
administrators  who  are  in¬ 


creasingly  becoming  buried 
under  the  large  volume  of  scan 
reports,  “not  knowing  which  of 
the  problems  . . .  are  actually 
important,”  he  said. 

A  potential  difference  be¬ 
tween  the  Army’s  program  and 
one  appropriate  for  a  business 


lies  in  the  level  of  risk  that 
individual  systems  face,  said 
Richard  Hunter,  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn. 

“It’s  unclear  what  level  of 
analysis  is  being  done  before¬ 
hand  to  determine  appropriate 
levels  of  security  for  particular 
systems,”  said  Hunter,  refer¬ 
ring  to  the  Army’s  rollout  of 
STAT  Scanner.  “In  most  busi¬ 
nesses,  it’s  a  waste  of  resources 
to  protect  every  system  to  the 
maximum  extent  possible. 
Some  systems  just  aren’t  that 
mission-critical.”  > 


About  STAT  Scanner 


OPERATING  SYSTEMS:  Microsoft  Corp.  Windows  NT,  Win¬ 
dows  2000  and  Windows  XP;  Linux;  and  Unix 

WHAT  IT  DOES:  Assesses  more  than  1,400  network  security 
vulnerabilities  and  automatically  repairs  many  of  them. 

WHAT  IT  INCLUDES:  In  addition  to  Scanner,  the  STAT  product 
suite  includes  Neutralizer,  a  behavior-based  intrusion- 
prevention  tool  that  short-circuits  security  threats,  and 
Analyzer,  a  network  security  risk-assessment  tool  that  auto¬ 
mates  and  streamlines  network  security  assessment. 


Tool  Aims  to  Minimize  Firms’  Insider  Threat 


Software  merges  physical,  network  layers 


BY  DAN  VERTON 

Trusted  insiders  with  mali¬ 
cious  intentions  and  access  to 
physical  connections  to  IT  net¬ 
works  could  face  a  new  securi¬ 
ty  system  that  may  even  take 
their  picture  while  they’re  in 
the  act  of  sabotage. 

ITT  Industries  Inc.  in  White 
Plains,  N.Y.,  has  introduced 
a  real-time  asset-management 
application  that’s  currently  be¬ 
ing  deployed  throughout  a  ma¬ 
jor  financial  institution,  which 
it  declined  to  name  due  to  con¬ 
tractual  and  security  reasons. 

According  to  Jonathan  Blitt, 
president  of  the  ITT  Industries 
Network  Systems  &  Services 
division,  the  LANSense  prod¬ 
uct  integrates  physical  security 
with  network  security  and  en¬ 
ables  administrators  and  secu¬ 
rity  personnel  to  isolate  and 
identify  the  source  of  network 
anomalies  or  failures. 

LANSense  is  a  nonpropri¬ 
etary,  intelligent  and  self-docu¬ 
menting  network  asset-man¬ 


agement  system  that  integrates 
third-party  network  manage¬ 
ment  systems  with  the  man¬ 
agement  of  copper  and  fiber 
structured  cabling  installa¬ 
tions.  It  can  also  be  integrated 


How  LANSense  Works 

■  LANSense  monitors,  records 
and  reports  the  status  of  all  con¬ 
nected  passive  and  active  ports. 

It  works  with  popular  network 
management  tools,  such  as  HP’s 
OpenView  and  IBM's  Tivoli. 

■  Patch  cords  have  an  unobtru¬ 
sive  external  probe  built  into  the 
plug  boot,  which  mates  with  the 
sensors  built  into  the  patch  panels 
above  the  connector  ports. 

When  a  patch  cord  is  inserted 
or  removed  from  a  sensor  patch 
panel,  electronic  analyzers  detect 
the  change  and  update  the  infor¬ 
mation  within  the  software,  which 
can  be  viewed  in  real  time  over  the 
Internet. 


with  camera  monitoring  sys¬ 
tems  that  can  capture  an  image 
of  whoever  is  working  at  the 
patch  panel  at  the  instant  a  fail¬ 
ure  occurs. 

“It  actually  rests  in  the  data 
communications  closet,”  said 
Blitt.  “If  a  plug  is  pulled  out  of  a 
patch  panel,  the  system  is  set 
up  so  that  it  can  snap  a  picture 
of  that  person,  or  an  audio 
alarm  can  go  off,  or  it  can  send 
a  page  or  an  e-mail  with  a  pic¬ 
ture  attached.” 

ITT  can  install  special  patch 
panels  that  have  a  small  metal 
strip  above  each  port,  referred 
to  as  a  “ninth  wire,”  that  carries 
an  electrical  current.  When 
something  is  moved,  it  breaks 
the  current,  sending  a  signal  to 
a  database. 

Monitoring  ‘Heartbeats' 

“Each  computer  has  its  own 
heartbeat,  and  that  heartbeat 
identifies  a  user’s  authorized 
space,”  said  Blitt.  When  some¬ 
thing  is  changed  at  the  patch 
panel  or  access  is  attempted  at 
a  physical  location  that’s  dif¬ 
ferent  from  what’s  in  the  data¬ 


base,  the  system  searches  in 
real  time  to  see  if  that  activity 
is  authorized,  he  said. 

Gary  O’Neall,  chief  Internet 
officer  at  PlaceWare  Inc.,  an 
online  conferencing  provider 
in  Mountain  View,  Calif.,  said 
he  agrees  that  merging  physi¬ 
cal  and  network  security  is  a 
value  add.  O’Neall,  who  once 
worked  in  the  intrusion-detec¬ 
tion  field,  said  he  regularly 
found  open  ports  and  configu¬ 
ration  errors  that  made  tracing 
operational  problems  difficult. 

Keith  Morgan,  chief  of  infor¬ 
mation  security  at  Terradon 
Communications  Group  LLC, 
a  Nitro,  WVa.-based  content 
management  company,  said 
having  such  a  system  in  place 
is  a  good  idea. 

“I  can  think  of  hundreds  of 
cases  throughout  my  career 
where  an  error  in  the  wiring 
closets,  or  someone  intention¬ 
ally  or  accidentally  disconnect¬ 
ing  a  patch  cable  has  caused 
downtime,”  said  Morgan.  “I  re¬ 
member  one  case  where  an  en¬ 
gineer  brushed  against  some 
cabling  in  a  wiring  closet,  dis¬ 
connecting  our  entire  Internet 
pipe.  He  had  no  idea  that  it  had 
happened,  and  it  took  us  quite 
some  time  to  nail  down.”  I 
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Wireless  Financial 
Apps  Grow  Slowly 


U.S.  consumers  hold  off  on  mobile  services , 
while  Wall  Street  embraces  technology 


BY  LUCAS  MEARIAN 

CAMBRIDGE.  MASS. 


w 


hile  wireless 
applications 
for  financial 
services  are 


gaming  pop¬ 
ularity  in  Europe  and  Asia,  U.S. 
consumers  aren’t  likely  to  em¬ 
brace  these  mobile  services 
anytime  soon,  according  to  IT 
managers  and  industry  experts 
who  spoke  at  an  e-business  fo¬ 
rum  here  last  week.  But  there 
is  a  mature  market  for  wireless 
business  applications  on  Wall 
Street. 

Octavio  Marenzi,  an  analyst 
at  Cambridge,  Mass.-based  Ce- 
lent  Communications  LLC, 
said  the  number  of  global  wire¬ 
less  financial  services  cus¬ 
tomers  is  expected  to  reach  80 
million  by  2004.  But  only  about 
3%  of  those  will  be  U.S.  clients. 

Between  62%  and  75%  of 
adults  in  Europe  have  cell 
phones  or  personal  digital  as¬ 
sistants  (PDA),  but  just  40%  of 
adults  in  the  U.S.  have  such  de¬ 
vices,  according  to  Blaise  Hel- 
tai,  managing  director  of  Inter¬ 
net  strategy  and  management 
at  Boston-based  FleetBoston 
Financial  Corp. 

“Messaging  is  the  killer  app,” 
Heltai  said. 

Sales  and  Marketing 

Part  of  the  roadblock  to  do¬ 
mestic  adoption  of  wireless  fi¬ 
nancial  applications  is  the  fact 
that  “no  one’s  going  to  sit  down 
and  do  block  trades  over  a  cel¬ 
lular  phone,”  said  Marenzi. 

Wireless  technology  will  be 
more  of  a  sales  and  marketing 
tool,  since  news  feeds  and 
stock  market  alerts  are  the 
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kinds  of  services  that  U.S. 
users  are  more  likely  to  adopt, 
he  added. 

Even  though  they  have  been 
slow  to  catch  on  with  con¬ 
sumers,  wireless  applications 
are  now  being  used  by  80%  of 
the  top  25  firms  on  Wall  Street, 
according  to  Celent.  On  the 
floor  of  the  New  York  Stock 
Exchange,  for  example,  brokers 
use  PDAs  to  receive  orders  and 
to  send  them  to  “trading  posts,” 


where  they  are  executed. 

For  its  part,  FleetBoston  set 
its  mobile  and  e-commerce 
course  in  June  2000  based  on 
the  assumption  that  adoption 
would  be  slow,  Heltai  said. 

“We  spent  under  $100,000 
on  [wireless]  home  banking,” 
Heltai  said.  Initially,  the  bank 
developed  a  text-based  inter¬ 
face  for  wireless  PDAs  to  its 
HomeLink  online  banking  ap¬ 
plication.  “We  made  our  mon¬ 
ey  back,”  Heltai  added.  “ROI 
can  work,  if  the  I  [for  invest¬ 
ment]  is  kept  small.” 

Some  U.S.  firms  are  spend¬ 
ing  between  $5  million  and  $50 


million  on  wireless  applica¬ 
tions,  “and  you  really  can’t  jus¬ 
tify  that,”  Marenzi  said. 

Hiroshi  Egami,  director  and 
general  manager  of  e-business 
and  the  IT  strategies  division 
at  The  Bank  of  Tokyo-Mit- 
subishi  Ltd.,  said  his  company 
has  found  moderate  success 
with  its  mobile  offering, 
Tokyo-Mitsubishi  Direct. 

So  far,  1.5  million  customers 
have  signed  up  for  the  wireless 
service,  a  number  that’s  equiv¬ 
alent  to  the  combined  total  of 
customers  at  30  of  the  bank’s 
branch  offices. 

“Since  Japanese  banks  are 
connected  by  a  national  clear¬ 
inghouse,  [customers  ]  can 
make  real-time  simple  funds 
transfers,”  Egami  said. 

The  bank’s  customers  make 
100,000  money  transfers  per 
month  via  cell  phone,  which 
equates  to  10%  of  the  bank’s 
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transfer  transactions,  he  said. 

“I  believe  the  mobile  market 
in  Japan  has  reached  a  mature 
level,”  Egami  said.  “More  than 
half  of  our  customers  said  [in  a 
poll]  that  they  expect  mobile 
banking  as  part  of  their  bank¬ 
ing  services.”  I 


Oracle  Pushes  Database 
Upgrade,  but  Users  Still  Leery 


Pricing  concerns 
linger  as  new  9i 
release  approaches 

BY  MARC  L.  SONGINI 

SAN  DIEGO 

As  Oracle  Corp.  prepares  to 
roll  out  a  database  upgrade 
that’s  due  for  release  next 
month,  users  and  analysts  last 
week  said  software  pricing  and 
support  issues  are  affecting  the 
company’s  relations  with  some 
of  its  database  customers. 

Oracle  executives  detailed 
plans  for  Release  2  of  the  com¬ 
pany’s  Oracle9i  software  at  a 
conference  run  by  the  Interna¬ 
tional  Oracle  Users  Group 
(IOUG),  an  independent  asso¬ 
ciation  of  database  users  that’s 
based  in  Chicago.  Oracle  said 
the  upgrade  will  include  man¬ 
ageability  and  performance 
enhancements,  plus  other  new 
features  (see  box). 

Users  at  the  IOUG  confer¬ 
ence  here  said  the  new  release 
could  provide  some  benefits, 
such  as  increased  automation 


of  database  cluster  manage¬ 
ment  and  improved  perfor¬ 
mance  on  decision  support  ap¬ 
plications.  But  several  atten¬ 
dees  noted  that  Oracle  needs 
to  overcome  some  stumbling 
blocks  if  it  wants  to  keep  users 
from  considering  a  switch  to 
Microsoft  Corp.’s  SQL  Server 
or  other  rival  databases. 

“I  think  customer  relations 
is  an  issue  [for  Oracle],”  said 


Database 

Additions 


Oracle  plans  to  include  the 
following  new  features  in 
Oracle9i  Release  2: 

The  ability  to  convert  XML  data 

into  a  relational  database  format  for 
use  in  sharing  information  with  busi¬ 
ness  partners. 

Support  for  using  standby  data¬ 
bases  to  do  read-only  functions  in¬ 
stead  of  letting  them  sit  idly. 

Full  integration  of  data  mining 

and  analysis  tools,  so  end  users  can 
run  queues  directly  against  databases. 


Charlie  Garry,  an  analyst  at 
Meta  Group  Inc.  in  Stamford, 
Conn.  Both  Meta  and  Gartner 
Inc.,  which  is  also  based  in 
Stamford,  took  Oracle  to  task 
for  its  database  pricing  policies 
in  reports  released  last  month. 

Oracle,  which  this  month 
adopted  a  more  conciliatory 
tone  in  an  attempt  to  smooth 
over  upgrade  issues  with  users 
of  its  applications,  has  said  that 
the  processor-based  database 
pricing  it  announced  last  June 
was  meant  to  simplify  licens¬ 
ing  for  users.  Last  week,  an  Or¬ 
acle  spokeswoman  noted  that 
the  standard  edition  of  Ora- 
cle9i  is  priced  to  be  directly 
competitive  with  SQL  Server. 

Cost  Could  Be  an  Issue 

Garry  said  many  IT  man¬ 
agers  still  don’t  think  SQL 
Server  offers  the  kind  of  data 
availability  and  system  perfor¬ 
mance  that  Oracle9i  does.  But 
cost  issues  may  eventually 
prompt  some  users  to  rethink 
their  allegiances  to  Oracle, 
Garry  added. 

“Oracle  is  getting  a  little 
pricey  right  now,  and  it’s  a  bar¬ 
gaining  chip  to  have  [SQL 
Server  as  an  option],”  said 
Douglas  White,  a  database  ad¬ 
ministrator  at  a  major  U.S.  uni¬ 
versity.  White’s  school,  which 
he  asked  not  be  identified,  uses 


Oracle8i  and  Oracle7  and  is 
running  the  first  release  of  Or- 
acle9i  in  test  mode. 

“We’re  used  to  Oracle,  and 
it’s  what  the  users  want,” 
White  said.  But  he  added  that 
some  database  administrators 
at  the  school  have  started  to 
rely  on  SQL  Server  instead. 

Oracle’s  pricing  is  confusing, 
said  Mindy  Bohannon,  a  lead 
IT  analyst  at  Cleveland-based 
industrial  manufacturer  Eaton 
Corp.  “They  change  it  every 
year,”  said  Bohannon,  who 
works  in  Eaton’s  e-commerce 
group  and  uses  Oracle8i  to 
power  the  company’s  Web  site. 

Support  was  another  issue 
raised  by  some  users  at  the 
IOUG  conference.  For  exam¬ 
ple,  Chris  Colclough,  a  senior 
professional  staffer  at  Johns 
Hopkins  University’s  applied 
physics  laboratory  in  Balti¬ 
more,  said  an  Oracle  customer 
support  worker  used  to  come 
by  on  a  regular  basis.  But  those 
visits  have  stopped,  he  said. 

While  Colclough  said  Ora¬ 
cle’s  overall  support  is  ade¬ 
quate,  he  added  that  the  on-site 
visits  were  useful  in  resolving 
“the  more  esoteric  problems.”  ► 

California's  state 

V/U1LJ\.  auditor  criticizes  an 
T  Oracle  licensing  deal 

-L ill  ll\\»  signed  last  year. 
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1°  of  separation  between  tomorrow’s  vision  and  today’s  budget. 
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Servers 

jobs,  said  a  half-dozen  atten¬ 
dees  at  last  week’s  spring  con¬ 
ference  of  the  American  Feder¬ 
ation  of  Computer  Operations 
Management  (AFCOM)  here. 

“We  still  have  to  get  our 
hands  around  open  systems,” 
said  Pete  Lillo,  manager  of  data 
center  operations  at  NCCI 
Holdings  Inc.,  a  Boca  Raton, 
Fla.-based  company  that  col¬ 
lects  and  processes  data  for 
firms  in  the  workers’  compen¬ 
sation  industry. 

NCCI’s  data  center  currently 
houses  a  mainframe,  20  Unix 
servers  and  about  130  Win¬ 
dows-based  systems.  Early  last 
year,  Lillo  said,  a  new  CIO 
persuaded  managers  at  the 
company  to  adopt  a  unified 
change-management  process. 

But  there’s  more  to  be  done, 
Lillo  said.  NCCI  puts  its  ap¬ 
plication  source  code  data  in 
four  separate  repositories  that 
were  set  up  for  the  different 
types  of  systems.  A  proposal  to 
develop  a  single  repository  or 
provide  a  common  view  of  the 
existing  data  has  received  pre¬ 
liminary  approval  but  is  still  in 


Continued  from  page  1 

Shortage 

current  crisis,”  said  Kent  How¬ 
ell.  manager  of  computer  oper¬ 
ations  in  the  400-person  IT 
group  at  Illinois  Power  Co.  in 
Decatur. 

“What  we’re  looking  at  is  an 
aging  staff  of  mainframe  per¬ 
sonnel”  coupled  with  the  pros¬ 
pect  of  maintaining  legacy  sys¬ 
tems  “for  quite  a  number  of 
years,”  Howell  said  during  a 
roundtable  discussion  on 
mainframe  skills  at  last  week’s 
American  Federation  of  Com¬ 
puter  Operations  Management 
conference  for  enterprise  data 
center  managers  in  Las  Vegas. 
“And  with  that  kind  of  prob¬ 
lem.  it’s  never  too  early  to  start 
planning.” 

Rather  than  hiring  new  em¬ 
ployees,  Illinois  Power  plans  to 
retresh  its  mainframe  exper- 
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Operation  Server 

AFCOM  attendees  listed  the  following  tips  for  data  center  man¬ 
agers  who  are  asked  to  provide  systems  operation  support  for 
departmental  Unix  or  Windows  servers: 

BUILD  a  working  relationship  with  the  business  managers  whose  servers  are 
being  put  under  your  control. 

MAKE  SURE  your  level  of  systems  management  responsibilities  are  spelled 
out  in  advance. 

INVEST  in  the  amount  of  training  needed  to  get  data  center  personnel  ready 
to  handle  the  new  systems. 

DEVELOP  ROI  calculations  or  other  business  cases  supporting  common 
operation  procedures  across  servers. 

AVOID  an  us-vs.-them  attitude  and  be  willing  to  compromise  on  some 
management  processes  to  reach  a  mutually  agreeable  starting  point. 


the  evaluation  stage,  Lillo  said. 

Lillo  is  also  seeking  funding 
for  enterprise  job  scheduling 
software.  He  said  there’s  no 
common  scheduling  tool  now, 
which  means  that  data  center 
workers  at  NCCI  “really  don’t 
manage  [the  process]  the  way 
I’d  like  it  to  be  managed.” 

Other  IT  managers  at  the 
semiannual  conference  run  by 
AFCOM,  an  Orange,  Calif.- 
based  association  for  data  cen¬ 
ter  professionals,  said  they  face 
similar  challenges. 

Coordinating  operation  sup¬ 
port  procedures  on  Unix  and 


Windows  servers  “is  the  big¬ 
gest  problem  we  have,”  said 
David  Sandberg,  chief  of  the 
business  management  division 
at  the  Defense  Information 
Systems  Agency’s  data  center 
in  Ogden,  Utah.  The  facility 
controls  140  servers  and  a  pair 
of  mainframes.  Sandberg  said 
he’s  looking  to  create  a  team 
that  would  take  charge  of  track¬ 
ing  the  configurations  of  all  of 
the  systems  and  potentially  set 
up  a  common  change-manage¬ 
ment  process.  But  nothing  is 
definite  yet,  he  added. 

Gary  Yeck,  an  analyst  at 


tise  by  teaching  mainframe 
skills  to  younger  employees  al¬ 
ready  on  staff  and  working  in 
open  systems. 

“We’re  also  looking  at  salary 
issues  to  try  and  entice  these 
people  to  keep  an  interest  in 
the  mainframe  side,”  Howell 
said.  “Two  years  ago,  we  paid 

■■■■  HU  ■■-■II. 
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Tips  for  Skills 
Management 

How  to  avoid  a  mainframe 
skills  crisis  five  years  out: 

IDENTIFY  staffers  with  critical  mainframe 
knowledge  and  assign  younger  IT  workers 
to  shadow  them  and  learn  from  them. 

CREATE  talent  alliances  with  neighboring 
companies  to  train  and  share  workers  with 
key  skills. 

INSTITUTE  bonuses  for  aging  skills. 

ASSIDUOUSLY  TRACK  all  IT  skills  in  use 
at  your  firm,  not  just  the  latest  hot  skills. 

SOURCE  GARTNER  INC  STAMFORD  CONN 


premiums  for  open-systems 
development  skills.  Now  we’re 
starting  to  look  at  premiums 
for  mainframes.” 

But  experts  say  that  compa¬ 
nies  such  as  Illinois  Power  are 
definitely  in  the  minority. 

More  than  90%  of  300  com¬ 
panies  that  have  mainframe 
staffs  said  in  a  recent  Meta 
Group  Inc.  survey  that  they 
have  “zero  strategy”  for  deal¬ 
ing  with  the  diminishing  pool 
of  skilled  mainframe  workers. 
Stamford,  Conn.-based  Meta 
estimates  that  55%  of  IT  work¬ 
ers  with  mainframe  experience 
are  over  50  years  old. 

“Most  companies  do  a  very 
poor  job  of  managing  and  plan¬ 
ning  their  skills  base,  especial¬ 
ly  their  aging  skills  base,” 
agreed  Diane  Tunick  Morello, 
an  analyst  at  Gartner  Inc.,  also 
in  Stamford.  “Companies  don’t 
realize  they’re  putting  them¬ 
selves  at  risk  because  they 
have  a  heavy  part  of  their  day- 


Meta  Group  Inc.  in  Stamford, 
Conn.,  said  much  of  the  resis¬ 
tance  to  adopting  more  rigid 
systems  operation  procedures 
boils  down  to  a  distrust  of 
mainframe  methods. 

“Walk  into  any  data  center 
and  talk  to  the  distributed  [sys¬ 
tems]  people,  and  they  think 
mainframe  is  a  dirty  word,” 
Yeck  said.  “They  don’t  want  to 
carry  forward  any  of  the  disci¬ 
plines  we’ve  learned  from  the 
mainframe  world.” 

But  some  IT  managers  are 
finding  ways  to  get  around  that 
resistance.  For  example,  Royal 
Bank  of  Canada  next  weekend 
is  due  to  finish  converting  the 
last  of  43  server-based  applica¬ 
tions  as  part  of  an  18-month 
project  that  was  designed  to  let 
its  data  center  personnel  use 
mainframe  tools  to  do  multi¬ 
platform  job  scheduling  and 
workload  balancing. 

Business  units  didn’t  have  to 
sign  up,  said  Patrick  Moras- 
sutti,  manager  of  enterprise 
scheduling  and  batch  automa¬ 
tion  at  the  Toronto-based 
bank.  But  they  were  told  that  if 
they  didn’t,  they  would  have  to 
monitor  overnight  batch  jobs 
themselves.  “They  get  scared 
when  you  say  that,”  he  said. 
“No  one’s  opted  out  yet.”  ► 


to-day  business  relying  on 
skills  not  even  being  taught  in 
schools  any  longer.” 

Meanwhile,  vendors  see  a 
huge  market  opportunity  in 
such  risk.  For  example,  Sun  Mi¬ 
crosystems  Inc.  by  no  means 
expects  users  to  abandon  their 
multibillion-dollar  investments 
in  Cobol  and  other  legacy  ap¬ 
plications,  according  to  Don 
Whitehead,  director  of  busi¬ 
ness  and  market  development 
for  Sun’s  enterprise  systems 
products  group. 

So  Sun  has  adopted  technol¬ 
ogy  designed  to  port  such  ap¬ 
plications  to  servers  running 
its  Solaris  operating  system. 

“We’re  preserving  the  ability 
to  write  Cobol  code  and  use  it 
in  a  Unix  environment,”  said 
Whitehead.  I 


Quick 

Link© 


For  more  on  the 
mainframe  skills 
shortage,  please 
visit  our  Web  site: 


www.computerworld.com/q?27672 


Don’t  Forget 
About  ROI 

LAS  VEGAS 

The  need  to  install  tools  that 
automate  IT  operations  across 
multiple  systems  may  be  self- 
evident  to  data  center  man¬ 
agers.  But  AFCOM  attendees 
said  the  senior  executives  who 
have  to  sign  off  on  such  proj¬ 
ects  want  to  see  something 
more  tangible:  returns  on  in¬ 
vestment. 

Pete  Lillo,  manager  of  data 
center  operations  at  NCCI 
Holdings,  said  he's  currently 
working  to  cost-justify  a  pro¬ 
posed  investment  in  enterprise 
job-scheduling  software.  The 
tools  that  he’s  considering 
would  probably  cost  between 
$200,000  and  $400,000,  Lillo 
estimated,  adding,  "And  I  have 
to  justify  in  business  terms  why 
it’s  necessary.” 

Lillo  is  due  to  present  the 
proposal  within  the  next  couple 
of  weeks.  If  all  goes  well,  he 
said,  an  enterprise  scheduler 
could  be  in  place  by  year’s  end. 

Mark  Levin,  an  analyst  at 
Meta  Group,  said  many  data 
center  managers  aren’t  well 
versed  in  doing  ROI  calcula¬ 
tions.  And  the  cost  of  new  data 
center  tools  may  be  exacerbat¬ 
ed  by  the  need  to  hire  contrac¬ 
tors  to  handle  the  actual  instal¬ 
lation  work,  he  added. 

One  of  the  potential  benefits 
of  multiplatform  tools  is  a  re¬ 
duced  need  for  system  opera¬ 
tors.  Patrick  Morassutti,  man¬ 
ager  of  enterprise  scheduling 
and  batch  automation  at  Royal 
Bank  of  Canada,  said  an  instal¬ 
lation  of  systems  management 
middleware  developed  by  Al¬ 
pharetta,  Ga.-based  Stone- 
branch  Inc.  enabled  the  bank  to 
cut  18  operations  jobs. 

But  all  of  the  affected  data 
center  workers  were  reas¬ 
signed  to  other  positions,  and 
Morassutti  said  the  big  justifi¬ 
cation  for  installing  the  soft¬ 
ware  as  part  of  an  18-month 
project  to  standardize  multi¬ 
platform  operations  was  the 
fact  that  uncoordinated  job 
scheduling  was  causing  sys¬ 
tems  errors.  “Downtime  costs 
us  more  money  than  people 
do,"  he  said. 

-  Craig  Stedman 
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HP  Blade  servers  are  here. 
The  most  flexible  way  to 
manage  your  infrastructure 


Radical  simplicity.  Extraordinary  flexibility.  HP  Blade  servers  are  about 
to  forever  change  the  way  you  look  at,  manage  and,  yes,  even  maneuver 
through  your  data  center. 

They  are  complete,  ultra-dense  servers  on  single  modular  cards— including 
processor,  memory  and  all  network  connections  — that  come  with  a  choice  of 
Linux,  Windows®  or  HP-UX. 

Easier  to  manage  and  maintain. 

This  elegant,  standards-based  design  allows  you  to  easily  combine  server, 
storage,  networking,  appliance  and  management  blades  in  the  same  38-slot 
chassis,  then  reconfigure  on  the  fly  to  handle  expanding  or  contracting  workloads. 

Each  blade  connects  to  the  network  infrastructure  already  embedded  in  the 
chassis,  dramatically  cutting  the  number  of  cables  needed.  With  far  fewer  cables 
to  fuss  with,  they're  far  easier  to  manage  and  maintain  than  conventional  servers. 
Even  management  is  shared.  Which  means  all  38  blades  can  be  viewed  and 
monitored  as  a  single  system. 

More  efficient  and  reliable. 

Since  all  blades  in  the  chassis  share  the  same  power  and  cooling  source, 
they're  also  more  energy  and  space  efficient.  In  fact,  you'll  find  HP  Blade  servers 
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server  blades 
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reduce  the  typical  number  of  fans  and  power  supplies 
required  by  as  much  as  60%. 

The  reliability  advantages  of  moving  to  blades 
are  profound.  To  give  you  some  perspective,  imagine 
building  a  server  cluster  solution  that  is  comparable  to 
a  fully  loaded  HP  Blade  server  cabinet.  The  projected 
annual  failure  rate  of  the  HP  Blade  server  solution  is 
about  41%  lower  than  that  of  the  comparable  server  cluster. 

In  the  unlikely  event  that  a  blade  should  fail,  the  problem  is  isolated  in  the 
same  way  that  multiple  systems  connected  by  I/O  are  isolated  from  each  other. 

Is  your  server  as  sharp  as  a  blade? 

Servicing  a  blade  is  as  easy  as  deploying  one.  Each  blade  is  freely  accessible 
from  both  the  front  and  rear  of  the  cabinet  and  can  thus  be  replaced  at  a  moments 
notice.  Each  slot  can  be  powered  on  or  off  separately.  Hot-swap  and  hot-plug 
technology  is  implemented  throughout,  allowing  for  the  seamless  addition  or 
replacement  of  blades  while  the  rest  of  your  infrastructure  continues  to  hum. 

We  invite  you  to  read  our  technical  white  paper  on  HP  Blade  servers. 
Or,  better  yet,  talk  directly  with  one  of  our  infrastructure  specialists  to  find 
out  more  about  how  HP  Blade  servers  can  change  the 
face  of  your  business.  Give  us  a  call  at  1.800.HPASKME, 
extension  246.  Or  visit  www.hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you.  invent 
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ravel  Firms  in  Quest  for  Interoperability 


BY  JENNIFER  DlSABATINO 

ATLANTA 

Travel  companies  and  the 
technology  vendors  that  serve 


them  are  calling  for  open  stan¬ 
dards  so  they  can  integrate 
travel  applications.  But  the  in¬ 
dustry  is  so  mired  in  legacy 


technology  that  it  will  likely  be 
fighting  that  battle  for  years. 

At  its  first  Travel  Technolo¬ 
gy  Conference  here,  Sherman, 


Conn.-based  online  travel 
analysis  firm  PhoCusWright 
Inc.  last  week  brought  technol¬ 
ogy  vendors  and  their  travel 
industry  customers  together  to 
talk  about  their  IT  challenges. 
Almost  unanimously  they  spoke 
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of  the  need  for  standards. 

Although  the  Open  Travel 
Alliance  is  developing  XML- 
based  standards,  companies 
such  as  Orbitz  LLC  are  going 
ahead  on  their  own,  said  Alex 
Zoghlin,  chief  technology  offi¬ 
cer  at  the  online  travel  firm  in 
Chicago.  Orbitz’s  servers  run 
on  Linux,  and  its  Web  services 
are  based  on  Java  technology. 

The  shift  to  standards  ap¬ 
pears  to  be  centered  on  two 
key  problems,  according  to  Je¬ 
remy  Wertheimer,  president 
and  CEO  of  ITA  Software  Inc. 
in  Cambridge,  Mass.  First,  the 
travel  industry  needs  to  get 
more  sophisticated  about  its 
customer  transactions,  which 
will  mean  moving  data  be¬ 
tween  suppliers,  such  as  hotels 
and  airlines,  through  Web  ser¬ 
vices.  Second,  he  said,  suppli¬ 
ers  are  faced  with  the  consoli¬ 
dation  and  eventual  removal  of 
legacy  back-end  systems. 

Replacement  Strategy 

Craig  T.  Murphy,  CTO  at 
travel  IT  provider  Sabre  Hold¬ 
ings  Corp.,  said  he  doesn’t  ex¬ 
pect  Sabre  to  invest  a  lot  more 
intellectual  property  in  its 
Transaction  Processing  Facili¬ 
ty  (TPF).  Fort  Worth,  Texas- 
based  Sabre  last  year  sold  its 
TPF  hosting  business  to  Plano, 
Texas-based  Electronic  Data 
Systems  Corp.,  and  its  IT  in¬ 
vestments  are  now  almost  en¬ 
tirely  in  the  development  of 
new  technology,  Murphy  said. 

The  plan  for  any  legacy  sys¬ 
tem  should  include  a  strategy 
for  replacement,  said  Paul  Bah- 
nick,  vice  president  of  technol¬ 
ogy  at  Farmingdale,  N.Y. -based 
Travel  Impressions  Ltd.,  a  sub¬ 
sidiary  of  New  York-based 
American  Express  Co.  that 
provides  wholesale  travel 
packages  to  travel  agents.  Bah- 
nick  has  built  middleware  that 
accommodates  legacy  systems 
and  newer  databases  so  he  can 
gradually  shut  off  the  older 
machines.  “We  just  refuse  to 
spend  another  dollar  on  the 
legacy  system  itself,”  he  said. 

A  serious  obstacle  to  the 
adoption  of  standards  is  that 
many  smaller  hotels  and  travel 
agencies  are  barely  computer¬ 
ized.  “Probably  70%  of  our 
business  is  still  done  by  fax,” 
Bahnick  said.  I 
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Competing  Standards 

Grometstein  said  that  he 
plans  to  upgrade  later  this  year 
to  Siebel  7,  which  will  handle 
order  management  and  trade 
order  entry  for  his  retail  bro¬ 
kerage  and  call  center.  He  said 
he  would  also  like  to  tie  it  in 


your  network. at  full  speed7. 


Siebel  Looks  to  Web  Services  for  CRM  Ties 


BY  MICHAEL  MEEHAN 

Siebel  Systems  Inc.  has  an¬ 
nounced  a  Web  services-based 
method  for  tying  its  customer 
relationship  management 
(CRM)  software  in  with  other 
business  applications. 

The  San  Mateo,  Calif.-based 
firm  will  release  its  Universal 
Applications  Network  this 
summer.  Using  an  IBM-creat¬ 
ed  standard  called  Web  Ser¬ 
vices  Flow  Language  (WSFL), 
Siebel  will  let  users  model 
business  processes  as  reusable 
objects  that  plug  into  any  en¬ 
terprise  application  integra¬ 
tion  system. 

“This  could  take  one  major 
level  of  effort  and  worry  out  of 
bringing  something  new  into 
our  infrastructure,”  said  Alan 
Grometstein,  vice  president  of 
technology  at  New  York-based 
brokerage  Quick  &  Reilly  Inc. 

Many  vendors  have  been 
making  noise  recently  about 
such  easy-to-integrate  prod¬ 
ucts.  Last  month,  Novell  Inc. 
executive  Chris  Stone  pro¬ 
mised  that  his  company  would 
migrate  its  product  line  to 
XML-based  interfaces.  Enter¬ 
prise  resource  planning  giant 
SAP  AG  already  publishes 
many  application  program  in¬ 
terfaces  in  XML  and  is  working 
with  Commerce  One  Inc.  in 
Pleasanton,  Calif.,  on  a  com¬ 
mon  business  library  for  exter¬ 
nal  transactions. 

“Everyone’s  trying  to  do  it;  at 
least  they  say  they  are,”  said 
Shawn  Willett,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.  Willett  said  that  many 
IT  development  projects  have 
fallen  short  because  they  don’t 
necessarily  plug  into  a  user’s 
architecture. 

“That’s  why  you  have  this 
whole  integration  industry 
that’s  developed  by  building 
adapters  to  all  these  applica¬ 
tions,”  Willett  said.” 


with  a  new  PeopleSoft  Inc.  hu¬ 
man  resources  system. 

However,  Willett  noted  that 
it’s  hard  for  any  one  vendor  to 


offer  standardized  approaches 
to  integration  without  support 
from  other  vendors.  He  added 
that  WSFL  faces  a  competing 


standard  called  Business 
Process  Modeling  Language 
(BPML),  whose  supporters  in¬ 
clude  Hewlett-Packard  Co.  and 
Sun  Microsystems  Inc. 

“There’s  been  talk  of  merg¬ 
ing  the  two,  and  hopefully  that 


will  happen,”  said  Willett. 

However,  Tyler  McDaniel, 
an  analyst  at  Hurwitz  Group 
Inc.  in  Framingham,  Mass., 
warned  that  WSFL  and  BPML 
“are  really  too  young  to  be  con¬ 
sidered  standards  at  all.”  • 
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Survey  Reveals  Unexpected  Drop  in  Insider  Attacks 


But  insider  threat  may  be  harder  to  detect 


BY  DAN  VERTON 

Some  experts  are  questioning  recent 
findings  that  defy  the  conventional  wis¬ 
dom  that  insiders  constitute  the  prima¬ 
ry  threat  to  enterprise  security. 

Only  38%  of  the  455  respondents  to 
the  latest  computer  crime  survey  spon¬ 
sored  by  the  FBI  and  the  San  Francisco- 
based  Computer  Security  Institute 
(CSI)  said  they  had  detected  insider  at¬ 
tacks  during  the  preceding  12  months. 
That’s  down  from  49%  reported  a  year 
ago  and  71%  reported  in 
2000. 

Moreover,  two  fed¬ 
eral  CIOs,  speaking  at  a 
recent  conference  spon¬ 
sored  by  the  Tiverton, 

R.I.-based  National  High 
Performance  Comput¬ 
ing  and  Communica¬ 
tions  Council,  said  their 
agencies’  statistics  show 
that  external  threats 
far  outweigh  internal 
threats  to  their  IT  infra¬ 
structures. 

“Our  biggest  threat  is 
external,”  said  NASA 


Insiders:  The 
Six-Year  Low 

Percentage  of 455  respon¬ 
dents  who  detected  insider 
abuse  incidents: 


1997  1998  1999  2000  2001  2002 


CIO  Lee  Holcomb,  acknowledging  that 
250  agency  systems  had  been  recently 
compromised  externally  in  a  matter  of 
three  weeks  due  to  vulnerabilities  that 
had  gone  unpatched. 

Insider  activity  is  “much  less  severe 
than  external”  attempts  to  breach  se¬ 
curity,  agreed  Laura  Callahan,  CIO  at 
the  U.S.  Department  of  Labor.  She 
added  that  since  Sept.  11,  the  agency  has 
made  a  concerted  effort  to  create  what 
she  called  an  internal  “neighborhood 
watch”  to  ferret  out 
suspicious  activity. 

But  the  threat  from 
insiders  has  become 
more  cunning  and  so¬ 
phisticated,  said  Rob¬ 
ert  Wright,  a  comput¬ 
er  security  expert  at 
the  FBI’s  National 
Infrastructure  Protec¬ 
tion  Center.  “Insiders 
are  not  just  employees 
anymore,”  Wright  said, 
adding  that  “new  tech¬ 
nology  makes  insiders 
more  dangerous  than 
ever.” 


According  to  Wright,  the  most  effec¬ 
tive  insiders  are  often  “keyholders”  — 
people  who  have  access  to  a  company’s 
internal  systems  based  on  contract  or 
partnership  arrangements  with  the  or¬ 
ganization. 

More  important,  the  technology  that 
malicious  insiders  now  have  at  their 
disposal  may  make  them  harder  to  de¬ 
tect  and  more  efficient,  said  Wright. 
New  IT  tools  that  can  be  employed  to 
steal  corporate  data  include  key-chain- 
size  hard  drives,  steganography  (con¬ 
cealing  data  within  a  digital  image)  and 
wireless  technology,  said  Wright. 

Other  experts  agreed  that  internal 
threats  warrant  continued  emphasis. 

“I  don’t  believe  that  many  corpora¬ 
tions  know  that  the  majority  of  attacks 
occur  behind  the  firewall,”  said  Mike 
Hager,  vice  president  of  network  secu¬ 
rity  and  disaster  recovery  at  Oppen- 
heimerFunds  Distributor  Inc.  in  New 
York.  “And  most  still  believe  the  fire¬ 
wall  will  stop  them.”  ► 

/^\|  The  FBI  say  it's  still  at  risk,  despite 

vyLllv-JV  changes  made  after  the  arrest  of  the 
T  most  damaging  mole  in  its  history. 

1  Jl  ww. computerworld.com/q729022 

For  online  resources  related  to  the  FBI  security  program, 

go  to  www.computerworld.com/q7a1810 
www.computerworld.com/q7a1820 


Amtrak  Says  IT  Outsourcing 
Deal  With  IBM  Will  Save  $85M 


Railroad  to  boost  IT 

services  for  employees 

BY  LINDA  ROSENCRANCE 

Amtrak  has  signed  a  $229  million  IT 
outsourcing  deal  with  IBM  that  the  pas¬ 
senger  railroad  said  will  save  it  $85  mil¬ 
lion  over  the  course  of  the  seven-year 
contract. 

The  deal,  which  is  an  extension  of  a 
10-year  agreement  between  the  two 
companies,  calls  for  IBM  Global  Ser¬ 
vices  to  manage  Amtrak’s  entire  com¬ 
puting  infrastructure  from  a  data  center 
in  Manassas,  Va.  Because  Amtrak  still 
owes  IBM  $101  million  from  the  previ¬ 
ous  contract,  the  total  of  the  renegotiat¬ 
ed  deal  is  $330  million,  according  to  an 
IBM  spokeswoman. 

Amtrak  CIO  Bob  Galey  said  the  rene¬ 


gotiated  agreement  will  not  only  save 
money  for  his  company  by  cutting  the 
costs  of  the  contract,  but  it  will  also 
give  Amtrak  more  bang  for  the  buck  by 
improving  IT  services  for  its  24,000 
employees.  Amtrak’s  23.5  million  pas¬ 
sengers  nationwide  will  also  benefit 
from  improved  service  as  a  result  of  the 
deal,  the  company  said. 

Aiding  Alignment 

Dwayne  Ingram,  vice  president  of 
travel  and  transportation  at  IBM  Global 
Services,  said  the  contract  is  different 
from  most  outsourcing  deals  because  it 
calls  for  IBM  to  help  Amtrak  align  IT 
with  its  business  strategy. 

“We’re  going  to  sit  down  with  Am¬ 
trak  business  leaders  to  map  out  how 
IT  services  should  work  with  business,” 
Ingram  said.  “We’ll  be  working  on  sev¬ 
eral  additional  projects  that  will  take 


JUST  THE  FACTS 


Under  the  deal,  IBM  will: 

■  Manage  Amtrak’s  entire  computing  infrastruc¬ 
ture,  including  providing  help  desk  support  for  7,500 
workstations  and  management  of  the  company's  voice 
and  data  networks. 


■  Manage  Amtrak’s  Arrow  reservation  system, 

which  processes  up  to  3,300  transactions  per  minute 
via  the  Web,  telephone  and  ticket-counter  channels. 


■  Work  with  Amtrak  to  market  the  Arrow  reser¬ 
vation  system  to  other  transportation  companies  in 
Europe  and  Asia/Pacific. 


out  costs  and  increase  revenue.” 

Analysts  disagreed  on  the  impor¬ 
tance  of  Amtrak’s  $85  million  savings. 

Ronald  Utt,  a  transportation  analyst 
at  The  Heritage  Foundation,  a  Wash¬ 
ington-based  think  tank,  said  wryly  that 
$85  million  may  allow  Amtrak  to  oper¬ 
ate  for  an  additional  two  weeks. 

But  Tony  Hatch,  a  New  York-based 
transportation  analyst,  said  that  the 
amount  is  “nothing  to  sneeze  at.  Am¬ 
trak  has  to  watch  every  penny,  just  like 
public  companies,  which  are  responsi¬ 
ble  to  shareholders.”  I 
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IBM,  Hitachi  to  Pool 
Hard  Disk  Drive  Units 

IBM  and  Hitachi  Ltd.  will  consoli¬ 
date  their  hard  disk  drive  business¬ 
es  into  a  company  that  will  be  ma¬ 
jority-owned  by  Hitachi.  IBM  said 
lackluster  results  in  its  hard  disk 
drive  business  and  a  belief  that  oth¬ 
er  sectors  of  the  storage  industry 
offer  better  growth  opportunities 
led  it  to  enter  the  deal.  Tokyo-based 
Hitachi  will  pay  IBM  an  undisclosed 
amount  for  a  70%  stake  in  the  firm, 
which  will  be  based  in  San  Jose. 


Sterling  Inquiry  Ends 

Computer  Associates  International 
Inc.  said  last  week  the  U.S.  Depart¬ 
ment  of  Justice  (DOJ)  has  closed  its 
investigation  into  CA’s  $4  billion  ac¬ 
quisition  of  Sterling  Software  Inc. 
without  taking  any  action.  Islandia, 
N.Y.-based  CA  said  the  DOJ's  inquiry 
raised  questions  similar  to  those  the 
department  posed  about  CA’s  buyout 
of  Platinum  Technology  International 
Inc.  In  September,  the  DOJ  accused 
CA  of  prematurely  taking  control  of 
Platinum,  a  practice  known  as  “gun¬ 
jumping.”  CA  denied  the  charge. 


Intel  Settles  Lawsuit 

Intel  Corp.  has  agreed  to  pay  Inter¬ 
graph  Corp.  in  Huntsville,  Ala., 
S300  million  in  return  for  a  group 
of  patents,  cross-licensing  agree¬ 
ments  and  a  cap  on  damages  in  a 
second  lawsuit  with  Intergraph 
that’s  still  pending. 

Intel  reported  first-quarter  rev¬ 
enue  of  S6.8  billion,  down  3%  from 
its  previous  quarter  but  up  2%  from 
the  same  quarter  a  year  ago. 

Short  Takes 

Greg  Brady,  CEO  of  12  TECHNOLO¬ 
GIES  INC.  in  Dallas,  stepped  down 
and  has  been  replaced  by  Sanjiv 
Sidhu,  i2’s  founder  and  chairman. 
Brady  will  stay  on  as  a  member  of 

the  board  of  directors _ IBM  re- 

j  “disappointing”  first-quarter 
ni-ig  ,  which  fell  by  31%  com- 
:•>  with  the  same  period  a  year 
,  ■  Net  income  was  down  32%. 
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Sun  Strives  to  Mend 
Its  Channel  Relations 


IForce  Partner  Program  intended  to 

help  partners  support  Sun  customers 


BY  TODD  R.  WEISS 

ORLANDO 

Faced  with  a  contin¬ 
uing  tight  economy 
and  slow  IT  sales, 
Sun  Microsystems 
Inc.  is  reaching  out 
to  maintain  its  market  share  by 
helping  its  resellers  better 
serve  end  users. 

At  its  iForce  Partner  Summit 
here,  attended  by  some  275  re¬ 
sellers,  Sun  last  week  unveiled 
an  iForce  Partner  Program  that 
will  for  the  first  time  give  its 
channel  partners  a  full  line  of 
services  to  better  support  Sun’s 
customers. 

Until  now,  such  services 
programs  were  informally  or¬ 
ganized,  said  Jon  Caputo,  vice 
president  of  Sun’s  professional 
and  enterprise  services. 

“It  worked  in  some  cases  and 
didn’t  in  others,”  he  said. 

The  idea,  said  Larry  Baker, 
director  of  enterprise  services 
at  Sun,  is  to  give  Sun’s  partners 
access  to  the  company’s  full 
capabilities,  which  previously 
weren’t  always  available.  The 
goal  is  to  “provide  a  consisten¬ 
cy  of  services  across  the  whole 
spectrum,”  said  Baker. 

Wary  Welcome 

The  news  was  welcomed  by 
several  resellers  here,  but 
some  remained  skeptical. 

Don  James,  vice  president  of 
sales  at  Cat  Technology  Inc.,  a 
reseller  and  systems  integrator 
in  Los  Gatos,  Calif.,  said  Sun 
still  has  a  lot  to  prove.  “I  think 
Sun  is  continuing  to  struggle,” 
he  said.  “There’s  a  myriad  of 
mixed  messages  in  what 
they’re  saying.” 

At  the  last  Sun  partner  sum¬ 
mit  two  years  ago,  when  Sun’s 
sales  were  healthy,  the  compa¬ 
ny  disregarded  the  resellers, 
James  said.  “They  thought  they 
could  live  without  their  chan¬ 
nel  or  treated  the  channel 


poorly,”  he  said.  “That’s  hurt 
them  for  the  last  18  months.” 

What  angers  resellers  is  that 
Sun  has  made  sales  directly  to 
end-user  firms  and  cut  re¬ 
sellers  out  of  the  revenue  loop, 
James  said.  “Sun  continues  to 
book  too  much  business  di¬ 
rectly,  even  on  accounts  that 
integrators  are  trying  to  book 
with  Sun,”  he  said. 

“They  want  exclusivity  and 


Paul  Flessner,  senior  vice  pres¬ 
ident  of  Microsoft  Corp.’s  .Net 
Enterprise  Server  group,  re¬ 
cently  discussed  the  compa¬ 
ny’s  ongoing  Trustworthy 
Computing  initiative  with 
Computers orld' s  Carol  Sliwa. 

Can  you  talk  about  the  impact  of 
Microsoft’s  intensive  security  ini¬ 
tiative  on  your  product  group?  The 

security  effort  overall  is  in  a 
couple  dimensions.  One,  it’s 
about  education  to  the  devel¬ 
opment  teams. . . .  [Two],  it’s 
about  a  thorough  review  of 
the  code. ...  So  the  Windows 
team  and  the  SQL  Server  team 
and  the  Exchange  team  and 
the  e-business  types  and  [Sys¬ 
tems  Management  Server] 
teams  have  all  been 
through  this  process 
of  training,  code 
review. 

And  now  it’s  about 
how  things  are  going 
to  roll  out,  and  what 
fixes  go  where,  and 
how  we’re  going  to 
back-level  some,  and 
how  many  just  go 
forward,  how  many 
break  compatibility. 


loyalty”  from  resellers,  James 
said  of  Sun.  “But  they’re  not 
giving  you  exclusivity  or  loy¬ 
alty.  They  say. it’s  getting  bet¬ 
ter.  They’ve  been  saying  it  for 
several  years.  It  remains  to  be 
seen.” 

Tim  Simmons,  vice  presi¬ 
dent  of  sales  at  Gateway  Com¬ 
puter  Associates  Inc.,  a  Sun 
value-added  reseller  in  St.  Pe¬ 
tersburg,  Fla.,  said  Sun’s  mes¬ 
sages  to  its  resellers  are  the 
right  ones.  “I’m  satisfied  with 
what  I’ve  heard  here,”  he  said. 
“I  think  they’re  headed  in  the 
right  direction.”  I 


. . .  We’re  hiring  outside  experts 
to  do  threat  modeling  and 
threat  analysis.  We’re  building 
our  own  team  internally. . . . 

It’s  hard  stuff.  It  actually 
takes  a  special  kind  of  person 
who  thinks  . . .  out  of  the  box. 
You  really  do  want  a  very 
chaotic  thinker.  You  don’t  want 
an  analytical  person  to  do  it. 

Have  you  had  to  make  staffing 
shifts  because  of  the  need  for  that 
type  of  person?  We  are  hiring 
those  people,  if  you  can  Find 
them.  They’re  very  hard  to 
find.  We  are  trying  to  train  in¬ 
ternal  people  to  start  to  think 
chaotically,  if  you  can  do  that. 

What  products  have  been  most  af¬ 
fected  by  the  security 
reviews?  I  don’t  know 
the  answer,  honestly. 
We’re  still  kind  of 
doing  the  analysis 
of  what  the  impacts 
are.  Windows  went 
through  first,  and 
they’re  kind  of  still 
sifting  through  all 
of  what  they’re  going 
to  do. 

But  I  feel  very  pos- 


VP  Explains  Microsoft’s 
Plan  to  Improve  Security 


FLESSNER:  Micro¬ 
soft  needs  to  prac¬ 
tice  better  “code 
hygiene.” 
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They  thought 
they  could 
live  without 
their  channel 
or  treated  the 
channel  poorly 
That’s  hurt 
them  for  the 
last  18  months. 

DON  JAMES,  VICE  PRESIDENT  OF 
SALES  AT  SUN  RESELLER 
CAT  TECHNOLOGY  INC. 


itive  about  it.  I  really  do  be¬ 
lieve  that  the  work  we’re  doing 
is  going  to  make  a  big  differ¬ 
ence.  ...  I  think  our  security 
model  is  very  sound.  Our  fail¬ 
ing,  if  you  will,  is  not  thinking 
like  a  criminal  mind  and  going 
back  and  going  through  areas 
that  we  had  no  idea  were  vul¬ 
nerable  and  patching  that  up. 

Have  any  products  had  delayed 
ship  dates  because  of  this  security 
review?  Yeah,  probably  on  one 
level,  all  of  them.  You  know, 
all  the  next  releases  will  have 
some  impact  by  this  work,  and 
probably  all  of  our  releases  go¬ 
ing  forward  will. 

What  lessons  have  you  learned  as 
a  result  of  the  security  review?  I 

think  the  thing  that  pops  up  is, 
we  call  it  code  hygiene  —  just 
the  need  to  constantly  be  re¬ 
placing  code  and  upgrading  it 
with  the  latest  thinking  and 
ideas. . . .  [With]  each  release, 
we  go  in,  we  rewrite  a  compo¬ 
nent  of  the  code  because  it  ages, 
and  it  gets  beat  up  over  time 
because  of  maintenance.  I  think 
what  we’re  going  to  be  doing 
more  ...  is  being  more  rigorous 
about  inventorying  our  code 
and  making  sure  that  we  re¬ 
place  it  on  a  more  timely  basis  » 
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Software  quality  f  80% 
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Introducing  Microsoft  Project  Server  2002,  the  newest  way  to  manage  your  enterprise  projects  at  every 

organizational  level  Today’s  complex  projects  have  grown  to  encompass  multiple  departments,  organizations,  and 
geographies,  which  means  visibility  and  collaboration  are  more  essential  than  ever.  Part  of  the  Microsoft®  .NET 
family  of  servers,  Microsoft  Project  Server  2002  works  with  Microsoft  Project  Professional  2002  to  help  you  manage 
resources  and  model  projects  across  your  portfolio.  Web-based  access  to  project  information  keeps  everyone  in  the 
loop,  at  any  time  and  from  anywhere.  And  the  open  architecture  in  Microsoft  Project  Server  2002  allows  you  to  deploy 
a  customized,  secure,  enterprise-scale  project-management  solution  that  integrates  with  your  current  business 
systems.  So  even  when  there  are  lots  of  hands  on  the  job,  they’re  still  of  one  mind. 

Find  out  how  Microsoft  Project  Server  2002  can  help  you  manage  projects  across 
your  organization.  Go  to  goprojectserver.com  Software  for  the  Agile  Busines  s 
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NEWSOPINION 


MARYFRAN  JOHNSON 

Demystifying  ROI 


HO’S  AFRAID  OF  ROI?  You  are.  At 
least,  that’s  what  CFOs  would  have 
us  all  believe.  Despite  much  dutiful 
attention  to  the  biggest  buzzword 
of  the  year,  the  rap  persists  among  CFOs  that  IT 


is  not  only  afraid  of  ROI 
but  also  clueless  about 
how  to  find  it,  figure  it 
and  finesse  it. 

Are  the  bean  counters 
right?  Or  are  you  building 
ROI  credibility  in  your  or¬ 
ganization  today?  Are  you 
getting  a  reputation  for 
being  savvy  about  apply¬ 
ing  IT  to  cost  savings  or 
revenue  generation? 

Maybe  not.  The  fastest 
way  to  the  heart  of  ROI  is 
measurement,  but  that  seems  to  be 
the  first  tripwire  for  IT  organizations. 
At  Computerworld’s  Premier  100  IT 
Leaders  Conference  last  month,  we 
asked  more  than  150  IT  executives  if 
they  measure  the  ROI  of  key  projects 
six  months  after  completion.  “Rarely 
or  never”  said  68%  of  them,  and  65% 
said  they  lacked  the  “knowledge  or 
tools  needed”  to  even  do  ROI  calcula¬ 
tions.  Ouch. 

Yet  everybody  in  IT  is  aware  of  the 
current  business  mantra:  “Show  me 
the  ROI.”  We  quote  IT  managers 
constantly  in  our  stories  about  the 
criticality  of  fast  payback,  quick 
turnaround  and  customer  benefits 
from  their  projects.  This  topic  is 
high  on  the  IT  radar  scope. 

It’s  even  higher  on  business  radar. 
Some  23%  of  U.S.  companies  are  de¬ 
manding  detailed  ROI  analysis  to 
justify  IT  investments  these  days,  ac¬ 
cording  to  a  recent  survey  of  1,200 
businesses  by  Marcoccio  Consulting. 
That’s  up  from  a  mere  9%  last  year 
—  and  likely  to  shoot  as  high  as  65% 
next  year,  the  consultancy  predicted 
[“In  Search  of  ROI  Measurements,” 
Business,  March  25]. 

It’s  equally  clear  that  when  ROI 
•.  an  be  measured,  the  business  side 


opens  the  checkbook.  At 
Delta  Air  Lines,  for  ex¬ 
ample,  this  year’s  IT  op¬ 
erations  project  budget 
of  $160  million  was 
bounced  up  to  more  than 
$200  million  “because 
[airline  executives]  had  a 
whole  list  of  projects  that 
would  produce  payback 
this  year,”  said  Curtis 
Robb,  president  and  CEO 
of  Delta  Technology 
[Page  One,  April  15]. 

IT  managers  who  have  found  (or 
created)  credible  ways  to  measure 
ROI  recommend  using  clear  lan¬ 
guage  that  highlights  the  benefits  not 
in  IT-speak,  but  in  business  terms. 
And  be  brief:  Keep  ROI  reports  to  a 
single  page.  These  managers  know 
that  “hard”  ROI  (spending  these  dol¬ 
lars  yields  this  payback  in  that 
amount  of  time)  is  better  than  “soft” 
ROI  (vague  promises  to  improve 
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productivity  or  customer  satisfac¬ 
tion).  And  they  make  sure  they  can 
answer  questions  such  as:  What  im¬ 
pact  will  this  system  have  on  sales? 
Where  exactly  does  it  save  money? 

Sometimes  you  find  ROI  in  unex¬ 
pected  places.  In  this  issue,  read 
about  how  National  City  did  that 
(“Beating  Back  Bureaucracy,”  page 
40).  The  1,200-member  IT  team  at 
the  Cleveland-based  financial  firm 
cut  its  average  project  turnaround 
time  by  an  astonishing  45%.  One  key 
method  involved  reuse  of  software 
code,  which  turned  into  a  very  mea¬ 
surable  ROI.  On  average,  a  single 
software  component  took  200  hours 
to  design,  at  a  chargeback  rate  of  $74 
per  hour,  or  $14,800  per  component. 
When  one  component  was  reused  in 
eight  different  projects,  that  saved 
the  company  more  than  $100,000. 

National  City  CIO  Jim  Hughes 
found  a  way  to  measure  ROI  clearly 
enough  for  any  CFO  to  understand 
and  appreciate.  Have  you  done  that 
yet  at  your  company?  E-mail  me,  and 
we’ll  write  about  your  IT  organiza¬ 
tion’s  triumph  over  big  bad  ROI.  I 


For  articles  and  resources  on 
ROI,  visit  our  IT  Management 
Knowledge  Center: 

www.computerworld.com/q?k1900 
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PIMM  FOX 

IT  Users: 
Know  Thyself 

THE  CREATIVITY,  inde¬ 
pendence  and  ambition 
that  drive  many  corpo¬ 
rations  to  success  can  also 
drive  IT  departments  to  dis¬ 
traction.  If  you  have  a  variety  of  quali¬ 
fied  people  throughout  your  enterprise 
purchasing  and  installing  software  and 
hardware,  you’re  going  to  have  a  hard 
time  keeping 
track  of  all  your 
IT  assets.  Add  in 
staff  turnover 
and  it’s  nearly 
impossible. 

For  example, 
how  many  lap¬ 
tops,  desktops 
and  software 
packages  do  you 
have?  What  are 
the  expiration 
dates  for  com¬ 
monly  used  applications?  Do  you  have 
too  many  or  too  few  software  licenses? 

No  fair  using  an  outdated  Excel 
spreadsheet  or  sending  an  intern  with 
a  clipboard  to  each  department. 

No,  asset  management  software  is 
what  you’re  after.  Why?  Because  it 
seems  to  work.  Here’s  what  Elizabeth 
Nevarez,  lead  asset  management  ad¬ 
ministrator  at  Reliant  Energy,  says  it 
does  for  the  Houston-based  utility  firm, 
which  is  in  the  throes  of  reorganizing 
itself  to  accommodate  energy  deregula¬ 
tion  in  Texas:  “We  were  a  victim  of  our 
own  environment,”  she  recalls.  “We 
have  four  points  of  entry  for  purchas¬ 
ing  software  assets,  and  [we]  don’t  have 
a  way  to  track  what  comes  in.” 

Reliant  chose  to  use  software  from 
San  Diego-based  Peregrine  Systems  to 
scan  PCs  and  send  the  information  to  a 
central  repository.  “Now  we  know 
where  the  software  assets  are  and  can 
track  them,”  she  says.  This  information 
helps  Reliant  negotiate  better  deals  on 
software  licenses,  as  Patricia  Keefe 
noted  last  week  on  this  page. 

“Like  many  large  companies,  we 
overbuy  on  software,”  says  Nevarez. 
“So  as  we  retire  assets  or  departments 
downsize,  we  can  now  redeploy  those 
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licenses.”  Nevarez  says  the  company 
would  have  trouble  determining  how 
many  licenses  are  available  without 
using  the  asset-tracking  software. 

Other  vendors,  such  as  Computer 
Associates,  offer  software  to  track  IT 
assets,  but  Peregrine  goes  well  beyond 
that,  tracking  things  such  as  vehicles 
and  real  estate.  The  California  High¬ 
way  Patrol  uses  asset  management 
software  for  its  fleet. 

At  Reliant,  anything  connected  to 
the  network  becomes  part  of  the  asset¬ 
tracking  system.  In  addition,  asset¬ 
tracking  software  monitors  all  the 
leased  equipment  —  representing 
about  30%  of  Reliant’s  IT  assets. 

Asset  management  software  makes 
it  possible  for  IT  personnel  to  combine 
software  packages  more  effectively. 

And  finally,  refreshing  technology 
on  old  machines  isn’t  necessarily  cost- 
effective,  but  detailed  reports  on  mem¬ 
ory,  processor  speed  and  warranty  life 
of  PCs  makes  it  easier  for  IT  depart¬ 
ments  to  select  which  machines  to  use 
and  which  to  discard. 

Rather  than  struggle  for  information 
about  the  purchase,  installation  and  dis¬ 
tribution  of  IT  assets,  let  asset  manage¬ 
ment  software  do  the  knowing  for  you.  I 

MICHAEL  GARTENBERG 

Prod  PC 
Makers  for 
Real  Change 

This  is  actually  the 
second  column  I’m 
writing  this  month.  I 
had  been  working  on  my  orig¬ 
inal  for  nearly  three  hours  and 

was  really  into  it,  which  explains  why  I 
hadn’t  bothered  saving  my  work. 

Like  Wile  E.  Coyote,  the  cartoon  char¬ 
acter  who  notices  he’s  no  longer  stand¬ 
ing  on  solid  ground  and  begins  to  fall,  I 
reached  over  to  hit  Save  but  was  too 
late.  Windows  XP  suddenly  gave  me  a 
blue  screen  filled  with  white  letters 
telling  me  there  was  a  bad  POL_CALL, 
and  my  IRQL  clearly  wasn’t  feeling  well. 
Swearing  a  few  epithets,  I  rebooted, 
only  to  blue-screen  again.  No  problem: 
There’s  a  note  on  the  screen  about  re¬ 
booting  in  “safe  mode.”  So  I  reboot. 

The  safe  mode  also  blue-screens.  I 
panic,  then  recall  that  there’s  an  option 
under  XP’s  setup  that  lets  you  access  a 
repair  console.  Mumbling  a  few  more 
epithets,  I  dig  up  the  CD.  I  get  as  far  as 


the  message  that  offers  to 
launch  the  console  and  — 
blue  screen!  At  this  point,  I 
give  up,  find  another  device 
and  start  again.  But  the  ex¬ 
perience  and  frustration 
changed  my  column  topic. 

The  PC  platform,  with  all 
its  speed  enhancements  and 
evolutionary  changes,  re¬ 
mains  a  fundamentally  un¬ 
stable  product.  It  doesn’t 
matter  if  you’re  running 
some  flavor  of  Windows, 

Unix,  Mac  OS  or  Linux. 

Every  modern  PC  and  oper¬ 
ating  system  retains  the 
flaws  of  its  initial  product  design,  like 
the  urban  legend  about  a  garment  ven¬ 
dor  that  sent  a  designer  coat  overseas 
to  be  copied,  only  to  get  back  10,000 
coats  with  identical  cigarette  burns  on 
the  sleeve.  Yes,  PCs  initially  had  to  be 
told  to  save  and  couldn’t  track  revi¬ 
sions  on  an  88KB  floppy  disk.  But  all 
that  should  be  history  by  now. 


Why,  for  example,  does 
every  program  force  users 
to  save  their  work?  (I  don’t 
consider  going  from  CTRL- 
KD  as  the  “save  to”  com¬ 
mand  in  Wordstar  to  CTRL- 
S  much  of  an  achievement.) 
Why  can’t  we  build  on  a 
real-world  model  that  says  I 
keep  everything  I  create  by 
default  and  throw  away  only 
changes?  And  why  can’t  we 
extend  the  metaphor  and 
keep  every  revision  on  my 
120GB  hard  disk? 

Yet  with  each  release, 
vendors  add  features  that 
no  one  uses  or  cares  about.  (The  cul¬ 
mination  of  useless  features  was  in 
Microsoft  Office  Assistant,  which  was 
so  universally  reviled  that  Microsoft 
actually  sent  out  press  releases  an¬ 
nouncing  the  demise  of  Clippy,  the  ani¬ 
mated  paper  clip,  in  Office  XP.)  Why 
are  the  default  settings  for  applications 
designed  to  punish  users  who  don’t 


follow  the  programmers’  rules? 

From  Day  1,  the  PC  industry’s  motto 
can  be  summarized  in  one  sentence: 
“Keep  the  customer  unhappy.”  Why? 
Because  happy  customers  don’t  see  a 
need  to  upgrade.  So,  here’s  a  little  ad¬ 
vice  for  IT  managers: 

■  Deal  with  vendors  who  make 
changes  that  matter. 

■  Buy  software  that  will  help  em¬ 
power  users  more,  not  frustrate  them. 

■  Focus  on  products  that  fix  flaws  in 
basic  PC  architecture,  and  watch  what 
happens  to  your  career. 

The  reason  no  one  has  been  able  to 
unseat  Microsoft  from  desktop  operat¬ 
ing  systems  dominance  is  that  no  one 
has  offered  a  fundamentally  different 
product  that  actually  solves  some  of 
these  long-standing  problems.  The  cig¬ 
arette  burns  remain  on  the  sleeves,  and 
it’s  time  for  us  to  demand  the  innova¬ 
tion  that  will  truly  revitalize  the  com¬ 
puting  experience.  As  for  me,  I  wrote 
this  column  on  my  trusty  PDA.  But 
that’s  another  column.  ► 


READERS’  LETTERS 


Defining  the  CTO  Title 

The  use  of  the  CTO 
title  varies  more  from 
industry  to  industry 
than  from  company  to  com¬ 
pany  [“CTO:  The  Not-So- 
Popular,  Misunderstood  Ti¬ 
tle  Needs  Defining,”  News, 
April  8].  A  service  company 
may  have  no  application  for 
technology  other  than  ful¬ 
filling  its  business/opera¬ 
tional  support  needs,  so 
technology  reporting  to  the 
CIO  is  appropriate.  But  a 
telecommunications  opera¬ 
tor  uses  technology  in  both 
its  product  and  business/op¬ 
erational  support;  having  in¬ 
formation  management  re¬ 
port  to  the  CTO  could  elimi¬ 
nate  duplicate  development 
and  operations  staff.  In  tech¬ 
nology  manufacturing  oper¬ 
ations,  separate  but  equal 
CIO  and  CTO  functions  can 
be  easily  defined. 

The  CTO  vs.  CIO  question 
is  answered  best  the  way  all 
business  decisions  should  be 
made:  The  form  must  meet 
the  functional  need.  It’s  the 
top  executive’s  duty  to  un¬ 
derstand  the  company’s 
needs  in  light  of  its  industry 
and  market  position  and  de¬ 


velop  appropriate  job  de¬ 
scriptions  —  regardless  of 
whether  Computers orld  is 
able  to  make  a  one-size-fits- 
all  definition  of  CTO. 
Edward  Branham 
Tampa,  Fla. 


Keeping  Track  of  Time 

I  enjoyed  the  article 
“Keeping  Tabs  on  IT 
Projects”  [IT  Manage¬ 
ment  Knowledge  Center, 
March  18],  but  I  disagree 
that  you  can’t  track  non-IT 
time.  I  have  been  doing  this 
since  1996  with  Project  Man¬ 
agement  Workbench/ABT 
Results  Management  Suite/ 
Niku  Portfolio  Manager. 
Charles  Carroll 
Program  analyst 
Olathe.  Kan. 


Plugging  the  Brain  Drain 

The  national  Acade¬ 
my  of  Public  Admin¬ 
istration’s  report 
states  that  the  federal  gov¬ 
ernment  invests  too  little  in 
continual  learning  and  that 
this  failure  is  especially 
problematic  in  the  rapidly 
changing  world  of  IT  [“Un¬ 
cle  Sam’s  Brain  Drain,”  Busi¬ 


ness,  March  25].  Someone 
needs  to  explain  this  to 
management.  My  director 
believes  that  if  she  gives 
training  to  her  IT  employ¬ 
ees,  they  will  leave.  The  fed¬ 
eral  government  could  easi¬ 
ly  make  itself  a  hot  employ¬ 
er  by  setting  up  internal  IT 
training  programs  and  hav¬ 
ing  employees  sign  one-, 
two-  or  three-year  contracts 
before  enrolling. 

Navar  Holmes 
Computer  specialist 
VA  Medical  Center 
Sheridan,  Wyo. 


Don’t  Share  Accounts 

t  the  end  of  the  trail 
in  the  article  “Sus¬ 
pected  Code  Theft 
Creates  a  Forensic  Furor” 
[Security  Manager’s  Journal, 
April  8],  the  investigation 
leads  to  a  pervasive  and 
dangerous  practice:  shared 
accounts.  With  shared  ac¬ 
counts,  actions  performed 
cannot  be  provably  traced  to 
an  individual.  Shared  use  of 
root  accounts  is  especially 
serious  because  of  the  virtu¬ 
ally  unlimited  access  those 
accounts  provide.  In  some 
industries,  including  phar¬ 


maceuticals,  shared  ac¬ 
counts  are  illegal. 

Doug  Picirillo 
Consultant,  principal 
Galaxia  Corp. 

Arlington  Heights,  III. 


You  Need  a  Shave,  Too 

The  article  “User  Be¬ 
ware:  Many  Vendor- 
Provided  ROI  Calcula¬ 
tors  Offer  Only  a  Veneer  of 
Objectivity”  [IT  Management 
Knowledge  Center,  March  18] 
reminded  me  of  the  saying, 
“Never  ask  a  barber  whether 
you  need  a  haircut.” 

Gopal  K.  Kapur 
San  Ramon,  Calif. 
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an  address  and  phone  number  for 
immediate  verification. 


(  Y?  ii/»L  For  more  letters 
V/LtlGiS.  on  these  and  other 
T  i  rt  i  z  topics,  visit  our 
liIlK«**  Website: 

www.computerworld.com/q7q5000 


MICHAEL  GARTENBERG  is 

research  director  for 
the  Client  Access  and 
Technologies  Group  at 
Jupiter  Media  Metrix  in 
New  York.  Contact  him 
at  miehael.gartenberg® 
mindspring.com. 


“There  is  no  reason 
for  any  individual 


to  have  a  computer 

in  their  home.”  t 

> 


1977 


1 

f 

\ 

“640K  ought  f 
to  be  enough  \ 
for  anybody.  ”  i 


1984 


“Portal, 

schmortal” 


2002 


(Pooh-pooh  it  now,  while  you  still  can.) 


Welcome  skeptics,  cynics,  and  naysayers. 

Every  major  innovation  in  technology  has  initially  been  met  with  more  than  a  little  resistance.  And  portal  technology 
is  no  different.  But,  like  the  other  innovations,  today's  curiosity  is  well  on  its  way  to  becoming  tomorrow's  necessity. 
Why?  Because,  quite  simply,  CleverPath™  Portal  and  Business  Intelligence  solutions  from  CA  let  you  work  smarter  and 
more  efficiently  than  ever  before.  Not  tomorrow.  Not  someday.  Right  now. 

Work  faStOf.  Work  smartor.  Work  togothor.  You'd  be  surprised  how  much  simpler  doing  business  can 
be  with  the  right  tools.  CleverPath  Portal  is  designed  to  be  highly  intuitive,  so  you  can  quickly  navigate  your  way  to 
exactly  what  you  need.  It  delivers  real-time  sales  data,  email,  and  inventory- level  indicators  without  having  to 
open  and  close  multiple  applications  every  time.  Legacy  systems,  mainframes,  desktops,  Web  Services,  and  mobile 
devices  are  now  seamlessly  integrated,  so  you  can  access  a  vast  breadth  of  information  from  anywhere  and  pull  it 
from  one  single,  secure  portal.  You  can  also  rely  on  it  to  automate  your  business  processes,  eliminating  all  the  time 
you  now  waste  trying  to  get  the  right  information  into  the  right  hands.  And,  thanks  to  our  business  intelligence 
tools,  over  time,  it  can  learn  your  preferences  and  deliver  them  before  you  even  ask. 


CleverPath 

Portal  and  Business  Intelligence  Solutions 


Start  working  now. 

The  CleverPath  Portal  "deploy  first,  customize  later"  model  means  you  can  install  and  implement  production-ready 
systems  in  days  or  weeks,  delivering  tangible  ROI  almost  immediately.  CleverPath  Portal  helps  control  costs  in 
other  ways.  CleverPath  Portal  delivers  a  high  degree  of  scalability  in  the  real  world  so  you  can  handle  millions  of 
users.  And  flexible  licensing  means  you  can  select  the  payment  and  licensing  options  that  best  suit  your  individual 
business  needs,  whatever  they  may  be. 


The  CleverPath  family  at  work. 

CleverPath  is  more  than  just  a  single  portal  product.  It's  a  family 
of  unified  portal  and  business  intelligence  solutions  that  deliver 
unique,  online  analytical  analysis,  reporting,  dashboard  development, 
business  rules  automation,  predictive  analysis,  and  visualization 
capabilities.  And  that  means  delivery  of  the  right  information  to  the 
right  people  at  the  right  time  — all  in  a  personalized  way.  Don't  spend 
another  day  without  tapping  into  the  true  value  of  your  enterprise. 
Go  to  ca.com/cleverpath/portal  and  find  out  more  now. 


Computer  Associates™ 


HELLO  TOMORROW™ 


WE  ARE  COMPUTER  ASSOCIATES 


THE  SOFTWARE  THAT  MANAGES  eBUSINESS™ 


©2002  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks  and  logos  referenced  herein  belong  to  their  respective  companies 


(AN  ADAPTIVE  SUPPLY  CHAIN  IS  A  BEAUTIFUL  THING.) 

A  business  is  a  jigsaw  puzzle  of  people,  products  and  processes.  And  because  it’s  constantly 
in  flux,  it's  hard  to  predict  what,  when.  The  mySAP  "  Supply  Chain  Management  Solution  connects 
you  with  your  customers,  partners  and  suppliers,  so  you  can  adapt  on  the  fly  to  shifts  in  supply  and 
demand.  It  also  offers  higher  visibility  and  covers  all  the  bases  —  from  planning  and  execution  to 
networking  and  coordination.  Which  makes  it  the  only  adaptive  SCM  solution  that  can  turn  a  supply 
chain  into  a  profit  center.  To  find  out  how  you  can  optimize  your  supply  chain,  go  to  sap.com/scm 

THE  BEST-RUN  E-BUSINESSES  RUN  SAP  MAT® 


ORDERS  ARE  ON  TIME.  EVERYONE’S 


IN  THE  LOOP  CUSTOMERS  ARE  HAPPY. 
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BACK  TO  BASICS 

With  the  economy  still  foundering, 
some  sanity  has  returned  to  project 
management  as  IT  leaders  empha¬ 
size  stricter  budget  controls,  daily 
progress  reports  and  streamlined 
methodologies  to  keep  such  efforts 
on  track  and  in  the  black.  PAGE  36 


“ASKING  FOR 

50%  forced  us 
to  re-examine 

i m 

everything  we’d 

done  previously,” 

says  Hughes. 

w 

r _ 

CRAZY  FOR  CASH 

In  2000,  when  National  City  CIO 
Jim  Hughes  (above)  challenged  the 
financial  services  company’s  1,200 
IT  professionals  to  cut  the  average 
project  time  by  50%,  they  thought 
he  was  nuts.  But  guess  who’s  laugh¬ 
ing  now.  PAGE  40 


TIMELY  TOOLS 

Having  the  right  project  manage¬ 
ment  software  can  go  a  long  way 
toward  reducing  project  creep  — 
and  pay  for  itself  along  the  way. 

PAGE  43 


CAREER  ADVISER 

Fran  Quittel  counsels  a  Washing- 
ton-area  software  engineer  who’s 
wondering  how  to  obtain  security 
clearances  and  offers  pointers 
to  an  unemployed  Java  program¬ 
mer  who’s  concerned  about  taking 
on  loans  for  certification  training 
without  any  employment  guaran¬ 
tees.  PAGE  44 


DAVID  FOOTE 

Seeding  Your  IT  Staff 

WE’RE  HEARING  THE  WORDS  economic  recovery  a  lot 

now.  It  could  be  optimism  fueled  by  upbeat  economic 
indicators,  or  the  enthusiasm  of  spring  after  the  end  of  a 
restless  winter.  Still,  real  job  growth  traditionally  trails 
economic  growth,  and  economists  are  pointedly  refusing 


to  predict  when  profits  might  cascade  into  corporate 
budgets  and  allow  IT  to  resume  hiring  in  earnest. 

That  will  happen  eventually,  but  as  any  good  gar¬ 
dener  will  tell  you,  preparing  for  the  harvest  begins 
long  before  the  seeds  are  planted. 

There’s  a  problem,  however.  Months  of  belt-tight¬ 
ening  and  fanatically  focusing  on  ROI,  benchmarking 
and  cost-benefit  analyses  have  diverted  IT  leaders’ 
attention  from  vital  things  they  do  to  build  effective, 
content  workforces.  These  include  things  like  spot¬ 
ting  and  nurturing  leadership  skills;  setting  vision,  di¬ 
rection  and  strategies  for  establishing  the  right  IT 
culture;  and  aligning  and  motivating  people  for  the 
formidable  task  of  delivering  shareholder  value. 
Achieving  those  objectives  —  not  mindlessly  follow¬ 
ing  CFO  dictates  to  reduce  costs  —  is  what  successful 
leaders  are  most  remembered  for. 

IT  decision-makers  need  to  be  concerned  right 
now  about  workforce  issues  in  order  to  capitalize  on 
bountiful  times  ahead.  These  three  areas  need  par¬ 
ticularly  close  attention: 

An  aggressive,  well-conceived  retention  strategy.  “You 
Inc.,”  the  free-agency  attitude  that  mocked  loyalty 
and  fueled  talent  bidding  wars  a  scant  few  years  ago, 
became  “You  Stink”  when  compulsive  job-hoppers 
began  to  outnumber  good  jobs.  With  jobs  hard  to 
come  by,  workers  now  seem  ready  to  settle  down. 

But  you  can’t  attract  and  retain  the 
cream  of  the  crop  in  this  buyer’s  market 
with  below-market  pay  or  stingy  benefits 
packages.  And  even  in  a  rotten  economy, 
your  stars  —  the  roughly  20%  of  your  peo¬ 
ple  you  can’t  afford  to  lose  —  can  always 
go  elsewhere. 

Building  loyalty  requires  a  thoughtful, 
well-executed  retention  strategy  and  a 
willingness  to  listen  and  continually  recal¬ 
ibrate.  Ask  workers  regularly  for  their 
ideas  about  their  work  and  workplace; 
share  information  that  had  previously 
been  held  closely;  give  them  coaching, 
mentoring  and  training;  help  them  plan 
their  careers;  and  do  everything  possible 
to  build  a  sense  of  community. 


Security  staffing,  the  sleeping  giant.  Security  is  quickly 
ascending  the  CEO’s  short  list  of  critical  “to-do’s.” 
Many  companies  appear  unprepared  for  the  hiring 
explosion  in  security  that  I  predict  will  begin  in  the 
first  half  of  next  year.  It’s  not  new,  “niche”  technical 
skills  that  are  causing  alarm,  but  the  absence  of  expe¬ 
rienced,  business-savvy,  technologically  astute  secu¬ 
rity  professionals  who  are  able  to  negotiate  through 
political  minefields  to  build  key  business  alliances 
and  confidence  about  security  operations. 

Boards  of  directors  fear  high-profile  Web  attacks 
and  privacy  breaches  that  can  damage  reputations 
and  impair  revenue  generation.  But  most  firms  lack 
dedicated  security  departments,  and  their  fragment¬ 
ed  approaches  to  security  will  soon  be  overwhelmed 
by  the  complexity  of  necessary  security  services. 

The  immature  infosec  service  provider  community 
will  offer  only  some  relief.  Executives  in  charge  of 
large  information  security  departments  fret  that  even 
their  budgets  are  too  constrained  to  recruit  expert 
talent  and  that  layoffs  have  weakened  them.  The  so¬ 
lution?  A  persuasive  marketing  campaign  led  by  a 
team  of  IT  and  business  unit  leaders,  plus  outside 
consultants  to  package,  “brand”  and  sell  a  security 
strategy  to  the  CEO  to  obtain  financial  commitments. 
Then  you  must  recruit  aggressively  and  deftly  project- 
manage  the  solution,  using  an  extraordinary  cus¬ 
tomer  focus  and  careful,  methodical  ap¬ 
proaches  to  mitigate  risks. 

The  power  of  process.  This  recession  has 
taught  us  that  discipline  and  attention  to 
process  will  produce  results,  and  they’re 
key  to  repeating  what  works.  But  you  must 
document  processes  that  produce  success 
so  they  can  be  taught  to  others,  and  then 
use  those  processes,  such  as  enterprise  proj¬ 
ect  management  and  balanced  scorecard 
approaches,  to  build  corporate  culture. 

Do  these  things  today  and  you  may  come 
out  of  the  recession  with  a  far  stronger 
workforce  than  you  had  before.  Remember 
that  you’re  in  a  position  of  power  in  a  rich 
and  hungry  talent  pool,  but  you’ve  got  to  go 
after  the  resources  you  need  now.  ► 


DAVID  FOOTE  is  president 
and  chief  research  offi¬ 
cer  at  Foote  Partners 
LLC,  a  management  con¬ 
sultancy  and  IT  work¬ 
force  research  firm  in 
New  Canaan,  Conn. 

Contact  him  at 
dfoote@footepartners.com. 
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business  logo  and  e-business  is  the  game.  Plav  to  win  are  either  registered  trademarks  or  trademarks  of  International  Business  Machines  Corporation 
all  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  2002  IBM  Corp.  All  rights  reserved. 


Storage  in  every  size  and  width. 


The  difference  between  winning  and  losing  is  a 
little  thing  called  “storage”  And  the  winning  play 
is  integrated  storage  solutions.  Why?  Hardware 
and  software  that  fit  and  work  together  speed 
implementation.  They  allow  you  to  maximize  your 
current  infrastructure  investments  and  help  reduce 
risk.  IBM  Total  Storage™  solutions  are  complete, 
cross-platform  storage  offerings  that  cover  storage 
networking,  disk,  tape,  software  and  services.  For 
example,  IBM  NAS  gives  you  amazingly  scalable 
data  storage  that  fits  into  just  about  any  LAN -fast. 
IBM  FAStT  offers  some  of  the  highest  performance, 
most  affordable  midrange  disk  storage  available 
today.  Are  you  bent  on  winning?  You  can  test-drive 
any  IBM  storage  solution  at  one  of  over  140  IBM 
TotalStorage  Solution  Centers.  Find  out  where,  at 
ibm.com/totalstorage/solutions 
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Legions  of  dot-coms  have  collapsed, 

companies  across  the  U.S.  are  laying  off 
workers,  and  the  economy  remains  in  a 

It’s  against  that  backdrop  that  some 
sanity  appears  to  be  returning  to  IT 
project  management. 

Gone  are  the  days  of  bottomless-pit  project  fund¬ 
ing  and  caffeine-pumped  software  developers  se¬ 
questered  off-site  and  working  around  the  clock  to 
be  first  to  market  with  a  glitzy  Web  site. 

Instead,  experts  say, 
economic  pressures  have 
prompted  IT  departments 
to  return  to  traditional, 
hands-on  “block-and- 
tackle”  project  management,  with  a  heavy  em¬ 
phasis  on  things  like  strict  budgeting,  daily  prog¬ 
ress  reports,  continual  user  feedback  and  codified 
processes  and  methodologies. 

“There’s  been  a  fundamental  shift,”  says  Bob 
Wourms,  director  of  the  IT  practice  at  PM  Solu¬ 
tions,  a  project  management  consulting  firm  in 
Havertown,  Pa.  “A  couple  of  years  ago,  time  to  mar¬ 
ket  and  market  share  were  very  critical.  The  focus 
now  is  on  what  is  profitable.” 

Experienced  project  leaders  who  have  recently 
produced  profitable  projects  on  time  and  on  budget 
attribute  a  good  part  of  their  success  to  dusting  off 
and  putting  in  place  certain  project  management 
chestnuts,  such  as  securing  visible  and  active  exec¬ 
utive  support  for  an  endeavor  early  on.  But  along 
the  way,  they’ve  also  developed  a  few  best-practice 
rules  to  keep  their  projects  not  only  on  track  but  in 
the  black  as  well.  Here’s  how  they’ve  done  it. 

Stick  to  the  Goal, 

But  Know  When  You’re  Done 

Profitability  requires  you  to  keep  proj¬ 
ects  not  only  on  time  and  on  budget, 
but  also  on  target  to  deliver  no  less  or 
more  than  what  they  were  designed  to 
accomplish. 

This  was  a  key  challenge  for  Jann 
Davis,  manager  of  Project  Discovery,  a  $10  million 
customer  service  and  call  center  initiative  at  Pacifi- 
Corp,  a  Portland,  Ore.-based  electric  utility  with 
1.5  million  customers. 

One  of  the  goals  of  the  18-month  project,  which 
involved  implementing  a  new  Web-based  billing 
system  and  automating  many  call  center  activities, 
was  for  PacifiCorp’s  325  call  center  agents  to  handle 
80%  of  incoming  calls  in  less  than  20  seconds.  This 
entailed  scripting  different  responses  that  would 
pop  up  on  an  operator’s  computer  screen,  depend¬ 
ing  on  the  type  of  call  request  that  came  into  the 
company’s  two  call  centers. 

“The  problem  was  keeping  the  team  to  the  80/20 
rule,’  Davis  says,  noting  that  certain  team  members 
wanted  to  script  responses  for  the  rarest  types  of  cus¬ 
tomer  issues.  “I  had  to  keep  pointing  out  the  goals 
of  the  project.  We  didn’t  need  a  Ferrari.” 

K  iov.  ing  when  you’re  done  is  critical  to  keeping  a 
*  meet  on  time,  on  budget  and  on  track,  Davis  says. 
But  h  w  do  you  do  it?  “I  had  to  throw  people  togeth- 


PROJECT 

MANAGEMENT 


Hands-on,  block-and-tackle  management  tech¬ 
niques  are  back  in  vogue  for  keeping  IT  projects 
on  track  and  in  the  black,  v  Julia  King 


PACIFICORP  project 
manager  Jann  Davis 
says  the  biggest 
challenge  she  faced 
in  a  recent  call  cen¬ 
ter  initiative  was 
keeping  the  team 
from  focusing  on 
goals  that  fell  outside 
the  project's  scope. 
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er  in  a  room  constantly  and  have  businesspeople  and 
developers  sit  together  to  come  up  with,  agree  on 
and  then  stick  to  the  requirements,”  she  explains. 

Sweat  the  Small  Stuff 

“I  wouldn’t  characterize  it  as  brute 
force,  but  rather  as  paying  relentless 
attention  to  detail,”  says  project  leader 
Pat  Freeman,  describing  his  style  of 
managing  a  $55  million,  15-month  proj¬ 
ect  to  develop  a  next-generation  soft¬ 
ware  system  for  car  dealerships  at 
Dayton,  Ohio-based  automotive  software  developer 
The  Reynolds  and  Reynolds  Co. 

Initially,  Freeman’s  role  was  that  of  project  res¬ 
cuer,  because  the  development  effort  was  off  sched¬ 
ule  and  over  budget.  There  were  also  no  clearly  de¬ 
fined  project  management  processes  and  procedures. 

Freeman  tackled  the  problem  by  instituting  what 
he  describes  as  “very  intense”  weekly  reviews, 
during  which  each  and  every  detail  of  any  slipping 
task,  deliverable,  schedule  or  cost  was  scrutinized. 

“The  meetings  lasted  two  to  four  hours,  and  we 
had  a  structured  agenda  every  week,  looking  at  the 
same  series  of  things,”  he  says.  “We  always  ap¬ 
proached  issues  in  terms  of  risk  and  what  effect 
they’d  have  on  the  schedule  and  business  case” 
before  developing  solutions. 

This  enabled  the  team  to  focus  first  on  higher-risk 
tasks  that  could  set  the  project  back,  Freeman  says.  It 
also  helped  keep  the  project  on  time  and  on  budget 
for  its  first  10  months,  though  a  quality  control  issue 
that  surfaced  toward  the  end  of  that  time  added  an¬ 
other  four  weeks  to  the  original  testing  schedule. 
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Insist  on  a  Full-Time  Project  Team 

One  of  the  first  things  Gina  King  did 
when  she  was  tapped  last  year  to  lead 
a  four-month  software  development 
project  was  to  insist  that  any  member 
assigned  to  her  team  be  there  on  a  full¬ 
time,  dedicated  basis.  Otherwise,  it 
would  be  impossible  for  members  to 
stay  committed  and  focused,  she  says. 

King,  an  IT  manager  at  Valassis  Communications 
Inc.,  an  $800  million  marketing  services  company  in 
Livonia,  Mich.,  had  just  16  weeks  to  produce  a  new 
Web-based  estimating  tool  for  a  large  customer  that 
was  being  heavily  courted  by  a  Valassis  competitor 
that  claimed  to  have  a  similar  tool  near  completion. 

“We  were  in  danger  of  losing  our  client,  so  we  had 
to  get  them  something  quick,”  King  recalls.  With  a 
full-time  project  team,  the  effort  was  completed  on 
time  and  is  credited  with  adding  $1  million  in  annual 
revenue  to  Valassis’  books. 


certification 


Do  Your  Own  Testing 

Chuck  Linebaugh,  director  of  infor¬ 
mation  systems  at  O’Hagan,  Smith  & 
Amundsen  LLC,  proved  the  effective¬ 
ness  —  and  financial  benefit  —  of  a 
new,  specialized  software  training 
course  by  requiring  that  all  users  at  the 
Chicago-based  law  firm  take  and  pass 
tests  based  on  the  training. 


“When  we  started  the  project,  we  had  an  analogy 
that  this  [training]  course  is  going  to  be  like  karate, 
and  that  every  one  of  the  tests  a  user  passed  is  like 
earning  another  belt,”  Linebaugh  explains.  “And  we 
wanted  everyone  to  earn  a  black  belt.” 

The  content  of  the  training  course  was  developed 
based  on  information  Linebaugh  and  his  support 
staff  gleaned  from  reviewing  a  year’s  worth  of  calls 
placed  to  the  help  desk  by  the  firm’s  100  attorneys 
and  150  support  staffers.  From  users’  questions,  “we 
defined  90  things  people  had  to  know  and  broke 
these  things  into  four  core  subjects,”  Linebaugh  says. 

The  four  subjects  —  Windows  2000,  file  manage¬ 
ment,  Microsoft  Word  and  Microsoft  Outlook  — 
then  became  the  areas  in  which  users  were  certi¬ 
fied.  Testing  began  in  June  2000,  and  the  law  firm’s 
managing  partner  was  the  first  employee  to  be¬ 
come  fully  certified.  By  June  2001,  all  250  employ¬ 
ees  had  taken  and  passed  the  certification  tests, 
which  are  now  part  of  the  firm’s  hiring  process. 

The  training  course  and  user  certifications  have 
yielded  a  return  on  investment  of  about  $400,000, 
thanks  to  a  drop  in  secretarial  and  other  support 
costs.  That’s  because  more  knowledgeable  workers, 
including  attorneys  who  now  handle  their  own 
e-mail  and  word  processing,  require  fewer  secre¬ 
taries  to  support  them. 


Secure  a  Payment 
Commitment  Upfront 

Dave  Patterson  is  a  big  believer  in 
what  he  describes  as  full  transparency. 

“Every  project  we’re  working  on  and 
its  status  is  reported  through  the  in¬ 
tranet,”  says  Patterson,  vice  president 
of  IT  at  Zurich  North  America,  the  Bal¬ 
timore-based  insurance  arm  of  Zurich  Financial 
Services.  “The  status  of  projects  is  all  very  fact- 
based.  You’re  either  making  your  dates  or  you’re 
not;  you’re  on  budget  or  you’re  not;  you  either  have 
an  issue  or  you  don’t.” 

Patterson  says  Zurich  applies  the  same  black- 
and-white,  fact-based  thinking  when  it  comes  to 
paying  salaries  and  bonuses  to  members  of  an  IT 
project  team.  The  bulk  of  each  project  team  mem¬ 
ber’s  salary  is  based  on  market  pay  rates  and  the 
worker’s  competency.  “But  about  10%  to  20%  of 
compensation  is  based  on  whether  the  company 
makes  money  and  whether  we  deliver  a  project  as 
promised,”  Patterson  says. 

His  other  financial  rule  of  thumb  is  to  always  get 
the  budget  and  funding  arrangements  of  a  project 
in  writing. 

“At  the  start  of  every  project,  there  is  a  project 
agreement,”  Patterson  says.  “It  needs  to  contain  the 
full  scope  of  the  project  plans,  risk  analysis,  costs 
and  benefits,  and  it  has  to  be  signed  by  the  business 
partners  willing  to  pay  for  the  project.  From  a 
block-and-tackle  perspective,  I  will  not  allow  a 
project  to  initiate  if  I  don’t  have  a  customer  who  is 
willing  to  pay  for  it.”  I 

pu  Compassion  or  exaction?  Visit  our  Web  site  to  see 

WLLLLJV  how  two  project  management  gurus  weigh  in  on  how 
to  get  the  most  out  of  your  project  management  staff: 

I  Jl  IK.  www.computerworld.com/q?28830 
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Top  10  Reasons 
For  Project 
Success 

O 

Executive  support 

G 

End-user  involvement 

G 

Experienced  project 
manager 

O 

Clear  business 
objectives 

0 

Minimized  scope 

0 

Standard  infrastructure 

O 

Firm  basic 
requirements 

0 

Formal  methodology 

© 

Reliable  estimates 

© 

Skilled  staff 
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ON  TIME 
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It  has  been  clear  for  some  time  now  that  the  future  will  be  a  world  in  which  everything  is  connected  to  everything,  seamlessly, 
automatically,  and  securely,  via  XML  Web  services.  What  has  not  been  clear  is  how  that  future  will  be  built.  Introducing  Microsoft* 
Visual  Studio®  .NET,  the  first  toolset  built  from  the  ground  up  for  XML  Web  services  development.  Just  one  keyword-WebMethod- 

turns  your  existing  application  into  a  Web  service,  and  with  new  Web  Forms  you  can  create  Internet 
Microsofr^^  applications  using  the  same  “drag-and-drop,  double-click  to  write  code”  technique  made  famous  by 

Visual  Studio. net 


•  2002  Microsoft  Corporation.  AM  nghts  reserved.  Microsoft.  Windows.  Visual  Basic.  Visual  C++.  Visual  C».  Visual  Studio,  the  Visual  Studio  logo,  and  the  .NET  logo  are  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countneu 
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Introducing 
Visual  Studio  .NET 


TOKYO 


The  world  takes 
a  little  step 
into  the  future. 


;  Microsoft  Visual  Basic®.  Plus,  the  whole  process  of  building  Windows®,  Web,  and  mobile  applications  gets  faster  and  easier  with 
the  new  Integrated  Development  Environment  (IDE),  which  gives  you  one  toolbox,  one  debugger,  one  task  list,  one  XML  designer, 
and  more.  And  within  the  IDE  you  get  support  for  over  20  languages,  including  Visual  Basic  .NET,  Visual  C++®  .NET,  and  new  Visual 
C#'“.NET,  so  you  can  leverage  your  existing  skills  and  code  across  development  teams  and  projects. 

Start  building  the  future:  visit  msdn.microsoft.com/vstudio  Software  for  the  Agile  Business. 
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WHEN  CIO  JIM  hughes  challenged 
his  1,200-member  IT  team  at 
National  City  Corp.  in  the  sum¬ 
mer  of  2000  to  cut  the  average 
project  time  by  50%,  they  won¬ 
dered  whether  he  was  crazy  or 
just  kidding. 

“My  jaw  dropped  to  my  knees,”  recalls  Tony  Hai, 
senior  vice  president  and  director  of  project  services 
at  the  Cleveland-based  financial  services  company. 

“I  thought,  ‘10%,  OK.  Lunatics  go  for  20%.  How  can 
you  even  think  about  50%?’  Once  I  got  over  the  shock, 

I  went  back  and  said,  ‘You’re 
just  kidding,  aren’t  you?’  ” 

But  Hughes  was  dead  seri¬ 
ous.  He  was  spearheading 
a  cultural  revolution  in  Na¬ 
tional  City’s  IT  organization,  and  as  part  of  that,  he 
was  determined  to  shake  up  the  way  project  manage¬ 
ment  was  handled.  Asking  for  an  incremental  im¬ 
provement  would  only  cause  people  to  cut  corners, 
he  reasoned.  “But  asking  for  50%  forced  us  to  re-ex¬ 
amine  everything  we’d  done  previously  and  focus  on 
reinventing  all  the  steps,”  Hughes  explains. 

Reinvention  was  overdue  at  National  City.  “It  was 
a  highly  siloed,  highly  specialized,  checklist-oriented, 
CYA  culture,”  Hai  says.  “We  were  drowning  in  bu¬ 
reaucracy  and  process.” 

People  were  overspecialized,  and  processes  were 
entrenched,  Hai  says.  “If  I  were  to  ask  why  this  is 
taking  so  long  to  develop,  the  bottom  line  would  be, 
‘We’ve  always  done  it  this  way,’  ”  he  says. 

Hughes  and  Hai  asked  IT  staffers  to  brainstorm  for 
the  rest  of  the  year,  and  the  ideas  began  to  fly.  The 
project  revolution  began  in  January  2001,  and  by 
year’s  end,  the  staff  had  cut  average  project  duration 
from  216  days  to  120  —  a  45%  reduction. 

This  success  has  been  cheered  by  business  people 
at  National  City  who  have  seen  project  benefits  de¬ 
livered  sooner  rather  than  later.  “Projects  delivered 
ahead  of  schedule  result  in  business  benefits  being 
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BEFORE  JIM  HUGHES, 
CIO  at  National  City 
(left),  challenged  his 
staff  to  reduce  project 
time  by  50%,  “we 
were  drowning  in 
bureaucracy  and 
process,”  says  Tony 
Hai,  director  of 
project  services 


National  City  completely  reinvented  the  way  it  approaches 
project  management  and  slashed  its  average  project 
duration  by  45%.  By  Kathleen  Melymuka 
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realized  ahead  of  plan,”  says  Vice  Chairman  William 
McDonald.  Here’s  how  National  City  did  it. 

Taking  Risks 

The  most  far-reaching  cultural  change  National 
City  had  to  encourage  was  risk-taking.  “Normally,  a 
project  manager  thinks  of  doing  everything  in  the 
safest  possible  way,”  says  Marty  Palicka,  vice  presi¬ 
dent  of  project  services.  “Now  we  say,  ‘If  a  project 
plan  has  no  risk  associated  with  it,  why  don’t  you 
think  about  improving  the  project  or  the  life  cycle 
or  the  ROI  by  taking  a  risk  or  two?’  ” 

But  first  managers  identify,  discuss  and  mitigate 
the  risks.  “People  look  at  every  task,  not  from  a  CYA 
perspective,  but  from  a  perspective  of,  ‘Why  am  I 
doing  this?  Is  it  adding  any  value?  What  is  the  risk 
of  my  not  doing  this?’  ”  Hai  explains. 

For  example,  in  National  City’s  Web  group,  putting 
any  change  into  production  used  to  take  three  days 
because  of  a  very  formal  approval  process  in  each 
support  area,  says  Theresa  Rath,  Web  production 
manager.  So  the  Web  developers  and  application  and 
production  support  staffers  who  sign  off  on  changes 
got  together  and  simplified  the  process  by  identify¬ 
ing  criteria  that  indicate  a  low-risk  change. 

Now,  if  a  change  meets  those  criteria,  it  can  hap¬ 
pen  immediately.  “We  still  have  a  formal  process,” 
Rath  says,  “but  now  it  takes  hours,  not  days.” 

IT  is  also  taking  risks  on  people.  Previously,  spe¬ 
cialists  were  applied  to  each  task,  so  projects  were 
often  delayed  until  an  expert  became  available.  Now, 
people  who  can  do  80%  of  the  work  are  assigned, 
and  experts  are  consulted  for  the  rest,  so  there’s  no 
waiting.  Quality  doesn’t  suffer,  people  find  the  new 
opportunities  enriching,  and  National  City’s  work¬ 
force  is  becoming  more  diversified  and  flexible, 
Hughes  says. 

Reusing  Code 

In  a  risk-taking  culture,  reuse  of  code  is  natural. 
“We  now  have  a  code  reuse  repository  that  we  use 
each  and  every  day,  so  we’re  not  always  going  back 
to  the  drawing  board,”  says  Rath. 

One  component,  for  example,  collects  and  vali¬ 
dates  customer  information  during  application  proc¬ 
esses.  “It  took  about  two  months  to  develop;  to  reuse 
it  takes  [only]  hours,  so  that’s  a  significant  savings 
for  us,”  Rath  says,  noting  that  the  duration  of  some 
projects  has  been  reduced  by  as  much  as  78%. 

Stephane  Hunsinger,  vice  president  of  application 
architecture,  estimates  that  on  average,  reuse  of  a 
single  component  saves  200  hours  of  design,  devel¬ 
opment  and  testing  time  at  a  chargeback  rate  of  $74 
per  hour.  That’s  about  $14,800  per  reuse.  Last  year, 
one  component  was  used  in  eight  projects,  saving 
the  company  more  than  $100,000. 

But  changing  to  a  reuse  culture  wasn’t  easy.  Some 
people  view  deep  technical  knowledge  in  an  applica¬ 
tion  area  as  job  security,  Hai  explains,  and  they  don’t 
want  to  give  it  up  to  a  code  repository.  “They  become 
highly  territorial,  highly  protective  of  their  knowl¬ 
edge,  and  sharing  doesn’t  happen,”  he  says. 

Hai  fights  that  mind-set  by  rewarding  workers  who 
share  their  knowledge  with  opportunities  to  do  sexier, 
more  exciting  work.  “That’s  an  incentive,”  he  says, 


“but  it  continues  to  be  a  very  difficult  thing  to  get  over.” 


Business  Benefits  First 

In  the  past,  National  City’s  project  teams  worked 
on  functional  requirements  in  descending  order  and 
implemented  them  all  at  once,  says  Business  Director 
Bobbie  Nehez,  who  manages  a  staff  of  project  man¬ 
agers  supporting  the  lines  of  business.  Now,  if  a  partic¬ 
ular  function  will  bring  in  revenue  —  like  an  online 
application  process  that  will  capture  new  customers 
on  the  spot  —  the  project  team  gets  that  module  im¬ 
plemented  first. 

“The  main  reason  we  wanted  to  reduce  project 
duration  was  not  just  to  say  we  did  things  faster,  but 
to  realize  business  benefits  for  clients  sooner,”  Ne¬ 
hez  explains.  “The  earlier  they’re  in  place,  the  more 
impact  to  the  bottom  line  of  National  City.” 

For  example,  a  project  to  calculate  the  time  between 
when  a  check  is  deposited  and  when  funds  become 
available  was  scheduled  for  implementation  in  2002. 
The  project  team  realized  that  two  modules  would 
provide  most  of  the  business  benefits.  It  completed 
those  first  and  implemented  them  ahead  of  schedule, 
realizing  80%  of  the  business  benefits  in  2001.  “The 
old  way,  we  wouldn’t  have  had  any  revenue  on  the 
books  from  this  at  all  last  year,”  Nehez  says. 

Teamwork 

Top  managers  across  IT  work  together  as  never 
before,  Hunsinger  says.  For  example,  when  a  project 
to  move  an  externally  hosted  online  banking  applica¬ 
tion  in-house  faced  a  very  tight  and  immovable  dead¬ 
line,  every  IT  director  offered  staffers,  space  or  ser¬ 
vices  to  help,  she  recalls.  They  pulled  together  a 
cross-functional  IT  team  and  beat  the  deadline. 

“Three  years  ago,  we  would  not  have  gotten  the 
cross-organizational  commitment  needed  to  make 
that  happen,”  Hunsinger  says. 

Top  IT  managers  also  participate  in  a  “moxie  re¬ 
view”  of  each  new  project,  examining  the  critical 
path  to  find  ways  they  can  help  speed  execution.  For 
instance,  a  project  could  end  up  being  stalled  for 
weeks  waiting  for  a  vendor  to  put  in  a  T1  line,  but 
during  the  review,  the  senior  telecommunications 
manager  could  offer  to  use  his  influence  with  the 
vendor  to  be  sure  the  line  was  ready  on  time. 

Nurturing  the  Culture 

Hughes  and  Hai  stress  that  while  nurturing  the 
new  culture  requires  constant  work,  it’s  as  important 
to  the  company’s  success  as  improving  processes. 
Previously,  certain  employees  were  considered 
untouchable  because  of  their  technical  skills.  Now 
everyone  is  assessed  not  just  on  competency  and  per¬ 
formance,  but  also  on  behavior,  attitude  and  how  well 
they  contribute  to  the  culture  of  the  organization. 

“Employees  with  low  values  and  performance 
were  dealt  with  aggressively  and  in  most  cases  re¬ 
sulted  in  them  leaving  the  organization,”  says  Hugh¬ 
es.  “Those  with  high  values  and  low  performance 
where  given  development  programs  or  reassigned.” 

“We  used  to  think  if  we  lost  certain  skilled  people, 
life  would  come  to  an  end,”  says  Hai.  “Well,  we’ve  gone 
through  those  real  tough  conversations,  and  we’ve  lost 
a  few  of  those  critical  resources  —  and  it  didn’t.”  ► 


Seven  Steps 
To  Speed 


o 

Culture  first 


Process  changes  don’t  happen  in  a  vacuum. 
Provide  a  vision  and  focus  on 
the  human  element. 


© 

Mitigated  risks 

Encourage  risk-taking,  but  only  after 
discussing  benefits  and  minimizing  negatives. 

0 

Code  reuse 

Don’t  reinvent  the  wheel  with  every  project. 
Reward  people  for  sharing  knowledge. 

o 

Modular  projects 

Plan  projects  in  quickly  implementabie  chunks. 

© 

Revenue-driven 

implementation 

Build  and  implement  revenue-producing 
modules  first. 


© 

Cross-project 

communication 

Encourage  people  to  talk  with  one  another  and 
explore  possibilities  for  collaboration. 

0 

Management  help 

Get  top  managers  to  pitch  in  and  remove 
barriers  to  increase  speed. 


Quick 
I  inkC 


To  find  out  what  two  project  management  experts 
think  of  the  radical  changes  National  City  has  taken 
in  its  approach  to  project  management,  go  to: 

www.computerworld.com/q728831 
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Contracting  a  turnkey 
3roject  team  can  be  a  great 
actic,  but  it  can  turn  into 
a  nightmare. 

By  Kathleen  Melymuka 

Hired  Guns: 

Pros  and  Cons 

Will  a  turnkey  project  be  a  dream  team  experience 
or  a  disaster  for  your  company?  The  following 
checklist  may  help  you  decide: 


Dream  Team 

Nightmare 

■  Short-term  project 

■  Continuing  initiative 

■  Isolated,  well-defined 
system 

■  Highly  integrated  into 
other  systems 

■  Tactical  focus 

■  Strategic  focus 

■  In-house  staff  busy  with 
higher-priority  projects 

■  In-house  staff  resentful 
of  turnkey  team 

■  Knowledge  transfer  and 
maintenance  easy 

■  Knowledge  transfer  and 
maintenance  complex 

NFORMATION  TECHNOLOGY  direc¬ 
tor  Brent  Zempel  had  a  problem 
much  bigger  than  his  small  staff 
could  handle  at  Life  Time  Fitness 
Inc.  in  Eden  Prairie,  Minn. 

The  health  and  fitness  club  op¬ 
erator  serving  100,000  members  in  six 
states  was  running  its  business  on  a 
Unix-based  client/server  system  that 
was  nearing  capacity.  But  the  firm  pro¬ 
jected  that  it  would  add  12  to  16  clubs 
over  the  next  two  years,  so  “the  tech¬ 
nology  we  were  using  wasn’t  going  to 
be  able  to  scale  with  the  company’s 
business  objectives,”  Zempel  recalls. 

Zempel  wanted  to  build  a  new,  open 
system  based  on  Java,  but  his  seven- 
person  IT  staff  was  too  small  and  too 
inexperienced  to  do  the  job.  Instead, 
Zempel  decided  to  contract  an  entire 
turnkey  project  team  to  come  on-site, 
plan  and  execute  the  development  of 
the  new  Web-based  system,  and  teach 
his  staff  how  to  carry  on  after  it  left. 

Zempel  and  his  director  of  applica¬ 
tion  development,  Wesley  Bertch, 
checked  out  the  capabilities,  depth  and 
methodologies  of  three  firms  that 
claimed  they  could  coordinate  and  com¬ 
mit  an  entire  project  team.  They 
judged  Boston-based  Aquent 
Inc.  to  be  the  most  techni¬ 
cally  credible  and  the  best 
value  and  signed  it  up. 

Fifteen  to  20  Aquent  con¬ 
tractors  ran  the  project,  augmented 
by  a  handful  of  Life  Time  IT  staffers. 
Eight  months  later,  they  delivered 
Phase  1  on  time  and  within  budget. 

The  price  of  turnkey  teams  varies 
widely  by  region  and  services  ren¬ 
dered,  but  Aquent  estimates  that 
personnel  costs  for  an  average  four- 
to  six-month  project  with  six  to  12 
technicians  will  run  from  $350,000  to 
$1.2  million.  Zempel  says  the  Life  Time 
project  was  less  costly  in  the  long  term 
than  it  would  have  been  to  refurbish 
the  old  system. 

Not  So  Fast 

For  the  right  company  and  the  right 
project,  this  SWAT-team  approach  has 
a  lot  to  offer,  but  there  are  also  reasons 
you  may  not  want  to  try  it. 

The  odds  against  any  IT  project  are 
tough,  and  an  outside  team  brings  ad¬ 
ditional  challenges.  Lucille  Renaud,  the 
Aquent  manager  on  the  Life  Time  proj¬ 
ect,  says  nailing  down  requirements, 
goal  and  scope  —  difficult  under  any 
circumstances  —  is  much  harder  for 
outsiders  who  don’t  know  the  compa¬ 
ny.  “You  have  to  be  very  inquisitive 
and  find  the  key  stakeholders  on  the 


business  and  tech  sides  and  make  sure 
they  approve  the  plan,”  she  says. 

Another  problem  is  making  sure  that 
contractor  advice  —  even  if  unpopular 
—  is  heeded  by  the  in-house  decision¬ 
makers.  Otherwise,  says  Laurie  Ben¬ 
nett,  the  Aquent  team’s  user  interface 
designer,  “we  do  it  their  way,  and  when 
it’s  proven  we  were  right,  we  all  scram¬ 
ble  to  fix  it.” 

In  addition,  “it’s  difficult  to  develop 
a  rapport  in  a  short  time  with  people  in 
the  organization,”  explains  Stan  Portny, 
a  project  management  expert  and  au¬ 
thor  of  Project  Management  for  Dum¬ 
mies  (Hungry  Minds  Inc.,  2000). 

Worst  of  all,  resentment  of  an  out¬ 
side  team  can  derail  a  project.  “We 
sensed  a  little  resentment  from  some 
of  the  [IT]  employees,”  says  Craig 
Peterson,  one  of  Aquent’s  technical 
project  leads  who  worked  with  Life 
Time.  “They  wondered  why  we  were 
brought  in,  why  they  weren’t  given  the 
opportunity.” 

Advantages 

However,  turnkey  project  teams  can 
also  bring  advantages.  These  include 
access  to  a  broader  skills  pool;  positive 
team  dynamics  established 
during  previous  engage¬ 
ments;  and  the  ability  to 
transfer  product  and  proj¬ 
ect  management  skills,  as 
well  as  systems  operation,  mainte¬ 
nance  and  evolutionary  frameworks,  to 
permanent  staffers. 

Zempel  found  that  there  were  sever¬ 
al  make-or-break  factors  that  he  could 
positively  influence.  The  first  was  hu¬ 
man  dynamics. 

“Without  the  right  mix  of  people, 
it  could  have  been  awful,”  he  says. 
Zempel  interviewed  virtually  every 
prospective  team  member,  looking  for 
the  right  personalities  as  well  as  talent. 
He  also  tried  to  minimize  the  “us  vs. 
them”  mentality  by  seeding  the  project 
with  a  handful  of  Life  Time  people. 

The  contractors  did  their  part  to 
neutralize  resentment  from  the  IT 
staff.  “We  told  them  we  were  brought 
in  to  help  them  be  able  to  do  this  after 
we  leave,”  Peterson  recalls.  “That 
helped  us  win  them  over.” 

Good  business  communications 
were  also  critical.  Business  people 
gave  Bertch  feedback  on  the  project’s 
progress  and  requests  for  revisions. 
Team  members  working  in  the  busi¬ 
ness  areas  reported  to  Renaud.  She  and 
Bertch  powwowed  daily.  “The  project 
manager  had  great  lines  of  communi¬ 
cation,”  Bennett  recalls.  ► 
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Using  the  proper  mix  of  project 
management  software  can  fore¬ 
stall  delays  and  cost  overruns. 

By  Pimm  Fox 
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Projected  Returns 

A  rundown  on  how  effective  project  management 
can  promote  improved  returns  on  investment 


Effective  project  management  programs  can  . . . 


■  Yield  an  average  28%  return  on  investment 

■  Generate  overall  business  improvements  by  an  average  of  21% 


The  implementation  of  project  management  initiatives 
has  led  to  improvements  in  . . . 

■  Schedule  estimating  . . .  .38.6% 

■  Customer  satisfaction  . .  .37.6% 

■  Alignment  with 

business  goals  . 37.0% 

■  Time  and  budget  to  date  .32.5% 

■  Schedule  performance  . .  .32.1% 

■  Cost  performance  . 23.8% 

■  Staff  productivity  . 22.8% 

■  Time  to  market . 21.7% 

■  Average  time  to 

repair  defects  . 11.8% 

Base:  43  senior-level  project  managers;  multiple  responses  allowed 


The  numbers  are  frighten¬ 
ing.  Half  of  all  IT  projects 
fail  to  meet  objectives,  and 
half  are  delivered  over  bud¬ 
get,  according  to  Gartner 
Inc.  in  Stamford,  Conn. 
Meanwhile,  Aberdeen  Group  Inc.  in 
Boston  reports  that  30%  of  IT  projects 
are  canceled  prior  to  completion  and 
90%  are  delivered  late. 

Combine  these  results  with  the 
$275  billion  spent  each  year  in  the  U.S. 
on  some  200,000  software  develop¬ 


ment  projects,  and  it  becomes  evident 
that  effective  project  management  — 
and  the  proper  tools  to  track  these 
efforts  —  are  vital  to  keeping  these 
projects  within  scope. 

At  Wilmington,  Del.-based  Du  Pont 
Co.,  project  management  software 
from  Tucson,  Ariz.-based  Automation 
Centre  LLC  helped  increase  the  sub¬ 
mission  rates  for  project  time  cards 
from  50%  to  97%. 

“We  were  always  dogging  engineers 
to  do  their  time  cards,”  says  Ronald  F. 
Carrick,  CIO  of  engineering  at  Du  Pont. 
“Now,  they  can  use  it  for  invoicing,  ex¬ 
pense  reporting  and  resource  manage¬ 
ment  tied  to  specific  projects.” 

Installed  in  January  2000,  the  soft¬ 
ware  suite  is  used  by  engineers  on-site. 
Because  Du  Pont  projects  are  funded 
and  managed  by  individual  business 
units,  project  management  software 
allows  Du  Pont  managers  to  define  the 
scope  of  each  project,  measure  the 
units  of  work  and  track  hours  against 
project  plans. 

So  far,  about  700  engineers  at  Du 
Pont  use  the  project  management  soft¬ 
ware,  while  an  additional  1,400  to 
2,000  contractors  posting  time  cards 
from  all  over  the  world  have  access  to 
the  system. 

Previously,  Du  Pont  had 
built  project  management 
software  for  its  Digital 
Equipment  Corp.  VAX  envi¬ 
ronment,  but  it  was  a  terrible 
application,  recalls  Carrick. 

“People  were  late  with  time  cards, 
project  accounts  were  out  of  kilter, 
billing  for  projects  submitted  over  time 
sometimes  weren’t  valid,  and  there  was 
no  way  to  look  up  valid  project  codes,” 
he  says. 

Billing  accuracy  is  an  important 
component  of  project  management. 

“If  I  have  2,000  engineers  working 
on  a  project  at  a  nylon  plant,  and  I  miss 
year-end  hours  being  posted  to  the 
project  because  of  an  invalid  project 
code  —  if  that’s  a  capital  project,  that 
has  big  tax  and  profit  implications,” 
says  Carrick.  That  “could  be  the  differ¬ 
ence  in  a  year’s  depreciation”  on  a 
project’s  value,  he  adds. 

Profitable  Project  Tools 

Indeed,  sound  project  management 
includes  looking  under  the  hood  at  the 
tools  used  to  oversee  these  efforts.  But 
measuring  the  returns  from  these  sys¬ 
tems  isn’t  always  easy. 

“It’s  a  little  like  asking,  ‘What  is  the 
return  on  investment  for  your  car  or 
your  house?’  ”  says  Carrick.  “One  way 


to  look  at  the  return  for  a  necessary 
function  is  to  evaluate  what  it  would 
have  cost  for  another  system,  for  ex¬ 
ample,  from  SAP  or  PeopleSoft.” 

For  instance,  says  Carrick,  the  total 
cost  of  ownership  of  Tracker  Suite 
from  Automation  Centre  was  at  least  10 
times  less  expensive  than  the  CATS 
system  from  SAP  AG  as  well  as  the 
time  and  labor  module  from  Pleasanton, 
Calif.-based  PeopleSoft  Inc.,  and  it  was 
just  as  functional. 

According  to  J.  Kent  Crawford,  CEO 
of  PM  Solutions,  a  Havertown,  Pa.- 
based  project  management  consulting 
firm,  buying  a  project  management 
tool  isn’t  enough  and  usually  results  in 
failure  if  it  isn’t  integrated  into  the  cul¬ 
ture  of  the  company. 

“Companies  spend  lots  of  time  and 
money  buying  things  they  think  will 
give  them  good  project  management, 
but  they  don’t  even  bother  to  define 
what  good  project  management  is,  in 
terms  of  goals,”  says  Crawford. 

Building  a  Case 

The  construction  industry  also  relies 
heavily  on  project  management  tools. 

It  needs  to  do  so  since  it  operates  on 
thin  profit  margins  (3%  to  5%  of  rev¬ 
enues)  and  project  managers  must 
organize  tight  delivery 
schedules  for  multiple  sub¬ 
contractors. 

Vanasse  Hangen  Brustlin 
Inc.  (VHB),  a  Watertown, 
Mass.-based  engineering,  design  and 
land  development  company,  uses  soft¬ 
ware  from  Foster  City,  Calif.-based 
iManage  Inc.  to  share  documents,  set 
up  project-specific  Web  pages  and  give 
access  to  geographically  dispersed 
units  working  on  similar  projects. 

“We  needed  to  solve  a  problem  relat¬ 
ed  to  our  six-year  project  to  extend  the 
New  Bedford-Fall  River  rail  extension 
in  southeastern  Massachusetts,”  says 
Greg  Bosworth,  manager  for  IT  opera¬ 
tions  at  VHB. 

“We  work  with  at  least  12  subconsul¬ 
tants  extending  50  miles  of  commuter 
track,  and  we  had  to  figure  out  a  way 
to  track  design  changes,  invoicing  and 
incorporate  comments  throughout  the 
project,”  Bosworth  says.  “Using  the  no¬ 
tification  engine,  we  can  see  who  made 
changes  to  documents  instead  of  chas¬ 
ing  down  e-mails  to  many  different 
people.” 

Although  it’s  still  too  early  to  judge 
the  savings,  Bosworth  says  that  if  VHB 
is  able  to  save  10%  of  its  employees’ 
time  by  using  the  iManage  software,  the 
effort  would  be  worth  it.  > 
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BUSINESSCAREERS 


Dear  Career  Adviser: 

I’m  a  software  engineer  seeking  work  in  the  Washington 
area.  Almost  half  of  the  available  jobs  require  some  kind 
of  security  clearance,  and  I  don’t  have  this,  because  I’ve 
always  worked  at  small,  private  companies.  Can  I  get 
this  clearance  on  my  own?  —  Classified  for  Clearance 


Dear  Clearance: 

You  would  be  working  for 
either  a  military  organization, 
government  agency  or  private 
employer  that  does  govern¬ 
ment  contract  work.  In  such  a 
situation,  your  employer,  not 
you,  obtains  a  security  clear¬ 
ance,  says  Dick  Jeffreys,  direc¬ 
tor  of  operations  and  chief  of 
staff  at  The  Destiny  Group, 
a  San  Diego-based  company 
that  assists  workers  with  tran¬ 
sitions  out  of  the  military. 


While  obtaining  some  secu¬ 
rity  clearances  might  involve 
just  a  few  months  and  a  few 
thousand  dollars,  your  em¬ 
ployer  might  be  spending 
more  than  a  year  and  tens  of 
thousands  of  dollars  to  allow 
you  to  do  top  secret  work. 

Your  best  strategy  might  be 
a  two-tiered  approach.  Get 
yourself  into  a  company  that 
does  both  regular  and  clear¬ 
ance-required  work,  suggests 
Jeffreys.  Start  with  a  job  that 
doesn’t  require  security  clear¬ 


ance,  and  move  over  to  the 
other  side  of  the  house  once 
you  get  clearance. 

Dear  Career  Adviser: 

I  am  a  Java/Java  2  Enter¬ 
prise  Edition  programmer  with 
two  years’  experience  but  no 
job  since  December.  A  company 
offering  training  loans  to  IT 
professionals  is  trying  to  recruit 
me.  The  end  result  of  their 
training  is  an  internship  and 
several  certifications  in  sys¬ 


tems,  security  and  networking. 
Tm  concerned  about  picking 
the  school  and  certification, 
plus  taking  out  a  loan  without 
knowing  for  sure  about  a  job. 

—  Tech  Training  Terry 

Dear  Tech  Training: 

Sallie  Mae,  the  nation’s  lead¬ 
ing  provider  of  education 
funding,  expects  to  do  $250 
million  in  IT-related  career¬ 
training  loan  volume  this  year 
through  its  sub¬ 
sidiary  SLM 
Financial  Corp., 
which  works  with 
some  1,500  autho¬ 
rized  computer 
training  schools, 
says  Dennis  Mur¬ 
phy,  SLM  Finan¬ 
cial’s  national 
sales  manager. 

Many  of  these 
loans,  which  range 
from  $1,000  to 
$25,000,  are  given 
to  career-changers 


entering  the  IT  Field,  as  well 
as  to  IT  professionals  who 
want  to  update  their  skills. 

Sallie  Mae  loans  require 
that  you  enroll  in  a  program 
with  both  a  start  and  an  end 
date,  and  that  you  be  credit¬ 
worthy.  While  you  can  defer 
repayment  of  your  loan  for  a 
charge  of  $10  per  month  for  up 
to  12  months  while  you’re  in 
training,  much  of  the  training 
and  certification  boot  camps 
are  available  at  night  so  you 
can  work  while 
you  attend  class. 

But  your  ques¬ 
tions  about  choos¬ 
ing  a  good  school 
and  employment 
following  training 
are  valid.  Murphy 
advises  that  you 
check  your  state’s 
education  Web 
site  to  make  sure 
that  the  school 
you’re  considering 
has  a  postsec¬ 
ondary  license.  ► 


fran  quittel  is  an  expert 
in  high-tech  careers  and 
recruitment.  Send 
questions  to  her  at 

www.computerworld.com/ 
career  adviser. 


WORKSTYLES 

Down  to  Business 
At  Freddie  Mac 


Glenn  Ervin,  director  of  sys¬ 
tems  development  at  Federal 
Home  Loan  Mortgage  Corp. 
(Freddie  Mac),  describes  an 
IT  culture  closely  linked  to  the 
mortgage  trading  company’s 
business  side  and  distinguished 
by  abundant  opportunities  for 
employees. 

What  are  the  most  critical  sys¬ 
tems  supported  by  your  depart¬ 
ment?  “Our  department  sup¬ 
ports  the  trading  rooms  and 
the  back  offices  of  the  trad¬ 
ing  rooms.  That  includes  the 
traders  and  the  people  who 
clear  trades,  settle  trades  and 
calculate  payments. 

“In  my  particular  group, 
we  support  the  back-office 
folks,  supporting  the  calcula¬ 
tion  of  the  payment  and  set¬ 
tlement  systems.  Freddie 
Mac  purchases  mortgages, 


bundles  them  in  securities 
and  sells  them  out  on  Wall 
Street.  We  support  that  proc¬ 
ess,  as  well  as  re-securitiza¬ 
tion,  where  we  take  a  group 
of  those  securities  back  in 
from  another  security  and 
resell  it.” 

How  would  you  describe  the 
pace  of  the  work?  “It  goes  in 
cycles.  The  second  half  of 
the  month  is  busy  for  one  of 
our  business  areas,  so  my 
team  is  on  its  toes  then.” 

Sounds  like  you’ve  got  close 
interaction  with  the  business 
side.  “We  don’t  see  our  busi¬ 
ness  area  as  customers  — 
we  see  them  as  partners.  If 
they’re  not  doing  well,  we’re 
not  doing  well.  We  are  in 
constant  contact,  multiple 
times  a  day.” 


How  would  you  describe  the  IT 
culture?  “The  environment  is 
very  casual.  We  like  to  have 
fun  while  we’re  working. 

The  staff  actually  eats  lunch 
together  quite  often.” 

What  do  you  like  best  about 
how  career  advancement  and 
training  are  handled?  “Last 
year,  everybody  had  to  take 
nine  days  of  training.  It  was 
built  into  our  evaluations. 
I’ve  never  seen  that  before, 
anywhere  I’ve  worked. 


“There  are  a  lot  of  oppor¬ 
tunities  here.  I’ve  been  here 
nine  years  and  came  in  as  a 
technician.  The  only  thing  I 
wanted  to  do  was  enhance 
my  programming  skills.  I  had 
no  plans  to  come  down  the 
management  track  at  all.  But 
I  was  presented  with  oppor¬ 
tunities  that  I  took  advantage 
of,  and  I’m  glad  I  did.” 

What  makes  your  IT  staff 
unique?  “One  thing  is  how 
well  we  know  the  business.  I 


have  employees  here  who 
could  sit  down  in  a  business 
seat  and  perform  a  lot  of 
those  duties  around  the 
systems  we  support.” 

What  do  you  love  about  coming 
to  work?  “I’m  constantly  sur¬ 
prised  with  the  talent  of  the 
people  we  have  working 
here,  not  just  in  IS  but  in  the 
business  area  also.  I  feel  like 
I  come  to  school  every  time 
I  come  in  here.  I  also  really 
like  how  the  things  you  learn 
about  Finance  bleed  into 
your  own  personal  finance. 
When  you  see  these  finan¬ 
cial  people  who  do  it  eight  or 
nine  hours  every  day  and 
you  talk  to  them  about  how 
they  invest,  it  gives  you  a 
good  idea  of  what  to  do  with 
your  own  money.” 

What  do  you  dread  about  com¬ 
ing  to  work?  “The  trafFic.  I 
come  from  Ashburn,  Va., 
about  20  miles  from  here.  It 
can  be  pretty  hellacious.” 

-MaryBrandel 

brandels@attbi.com 


Federal  Home  Loan 
Mortgage  Corp. 

Who  they  are:  Mortgage  trader  that 
has  financed  one-sixth  of  all  home  sales 
in  the  nation  since  1970. 

Main  location:  McLean,  Va. 

Interviewee:  Glenn  Ervin,  director  of 
systems  development 

Number  of  IT  employees:  1,000  in 
division;  130  in  department;  30  on  the 
systems  development  and  support  staff. 


Supplier  Intelligence  |  Organizational  Intelligence  |  Customer  Intelligence  |  Intelligence  Architecture  |  Enterprise  intelligence 


How  can  you  bring  consistency 
and  clarity  to  decision  making? 

Unleash  the  potential  of 
all  your  information  assets? 

And  give  your  enterprise  a  single,  ■ 
shared  version  of  the  truth? 


SAS  is  all  you  need  to  know. 


SAS  brings  together  information  from  any  source, 
across  every  platform,  and  creates  real  intelligence. 
We're  No.  1  in  data  warehousing.  And  only  SAS 
integrates  data  quality  with  today’s  most  powerful 
extraction,  transformation  and  loading  (ETL) 
capabilities.  To  find  out  how  top  companies  are 
reaping  bottom-line  rewards  from  SAS,  call  toll  free 
1  866  270  5727  or  visit  www.sas.com/warehouse 


The  Power  to  Know » 


SAS  and  aH  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  regishat 
©  2002  SAS  Institute  Inc.  AH  rights  reserved.  49349US.0302 
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SO  RELIABLE, 
IT a  THE 
LEADING 
DATABASE 
IN  HEALTHCARE 


More  hospitals  run  their  "life-or-death"  applications 
on  Cache  than  on  any  other  database  system. 

With  reliability  like  this  -  demonstrated  by  the  world's 
most  critical  applications  -  you  should  consider  Cache 
for  your  applications. 

The  speed  and  scalability  of  Cache  are  superior  to  the 
leading  relational  database  products,  even  though  it 
runs  on  much  less  expensive  hardware  and  requires 
far  less  database  administration. 

Cache  uniquely  combines  robust  object  and  relational 
technologies,  coupled  to  a  multidimensional  data 
engine.  Plus,  it  includes  a  rapid  Web  application 
development  environment. 

Cache  is  backed  by  24x7  support  from  InterSystems  - 
a  leader  in  high  performance  databases  for  23  years, 
with  4,000,000  users*  worldwide  in  healthcare, 
financial  services  and  other  industries. 

InterSystems  /• 

K CACHE 

Make  Applications  Faster 


Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSystems.com 

*  InterSystems'  database  technology  is  used  by  Ameritrade,  Hitachi,  Johns  Hopkins,  Kennedy  Space  Center, 
Pepsi  Cola,  Prudential  Insurance  Co.,  Shell,  U.S.  Army,  World  Bank  and  other  successful  enterprises. 

©  2001  InterSystems  Corporation.  All  rights  reserved.  InterSystems  Cache  is  a  registered  trademark  of  InterSystems  Corporation.Other  product  names  are  trademarks  of  their  respective  vendors.43-2 


THIS  WEEK 


‘GRINDING’ FOR  CHANGE 

The  next  evolutionary  step  in 
distributed  computing,  grid  tech¬ 
nologies  can  aggregate  idle  CPU 
power  to  handle  complex  process¬ 
ing  tasks.  But  not  all  applications 
benefit.  PAGE  48 


STORAGE  MANAGEMENT 

Automating  storage  resource 
management  tasks  makes  good 
sense  as  storage  networks  prolifer¬ 
ate.  Policy-based  tools  can  issue 
alerts,  but  broader  capabilities  are 
still  evolving.  PAGE  52 


FUTURE  WATCH 

Wearable  computing  devices  are 
becoming  more  sophisticated  and 
more  common.  But  they  could 
change  more  than  clothing  styles 
—  always-on  computing  may  raise 
concerns  about  the  erosion  of 
work/leisure  barriers.  PAGE  54 


EMERGING 

TECHNOLOGIES 

InfiniBand  will  redefine  the  data 
center  server  by  externalizing  I/O 
subsystems  connected  over  a  fast 
serial  network  and  making  them 
independently  scalable.  PAGE  56 


SECURITY  JOURNAL 


When  a  SQL  Server  database 
disappears,  support  staffers  restore 
it  quickly.  But  in  the  process,  they 

destroy  evi¬ 
dence  that  may 
have  helped  re¬ 
veal  the  identity 
of  the  perpetra¬ 
tor.  PAGE  60 


NICHOLAS  PETRELEY 

A  Success  Plan  for  Sun 


AN  OPEN  LETTER  to  Scott  McNealy  at  Sun  Microsystems: 

I’ve  got  a  few  bits  of  advice  for  you,  Scott,  the  first  of  which 
is  to  read  this  whole  letter,  because  I  saved  the  best  for  last. 

My  next  bit  of  counsel  is  to  resurrect  your  battle  against 
Windows  on  the  desktop.  It’s  tempting  to  overlook  the  desk¬ 
top  in  a  slow  economy.  The  battle  is  expensive,  and  there’s  no  immediate 
benefit  to  Sun.  But  it  will  eventually  pay  off  if  you  stay  in  the  fight  long 
enough  to  win. 


We’ll  revisit  the  desktop  in  a  moment,  but  first  let’s 
tackle  how  you  react  to  Microsoft’s  attempts  to  keep 
you  off  message.  Take  XML,  for  example.  Back  when 
Microsoft  found  itself  in  hot  water  over  Java  and  had 
no  language  to  compete  with  Java,  it  whipped  up  a 
marketing  campaign  to  promote  XML  as  a  technolo¬ 
gy  that  made  Java  irrelevant.  Your  biggest  mistake 
was  thinking  that  only  people  who  measure  their  IQ 
with  a  tire  pressure  gauge  would  fall  for  this.  Wake 
up,  Scott.  The  only  thing  more  dead  than  chivalry  is 
critical  thinking.  Don’t  rise  above  these  statements, 
and  don’t  ignore  them.  Destroy  them  with  a  truth 
that’s  easy  to  grasp. 

Here’s  what  I’d  say  about  Microsoft  and  XML:  “See 
this  pretty  Microsoft  Office  box?  That’s  XML.  No¬ 
body  has  to  tell  you  how  to  open  it  and  find  the  CD 
because  it’s  a  standard  box.  Well,  now,  that’s  wonder¬ 
ful,  isn’t  it?  But  can  anybody  tell  me  how  much  influ¬ 
ence  this  box  will  have  on  your  ability  to  work  with 
its  contents?  That’s  about  as  much  influence  as  XML 
has  on  software.  Heck,  XML  is  important,  and  we’re 
as  giddy  about  XML  as  the  next  guy.  But  what  do  you 
really  want  to  talk  about,  the  box,  or  what’s  inside?” 

If  you  don’t  like  that,  pick  your  own  way  of  putting 
it.  But  once  you  have  a  message  that  works,  get  the 
media  to  repeat  it  again  and  again,  and  then  repeat  it 
some  more.  Trust  me,  it’s  easy.  You  wrap 
the  same  message  in  some  insignificant 
new  detail  and  issue  a  fresh  press  release 
every  week.  If  you  need  a  primer  on  how 
to  do  this  effectively,  read  the  thousands  of 
articles  and  news  stories  that  preceded  the 
launch  of  Windows  95.  If  you  don’t  have 
time  to  do  that,  here’s  the  short  course: 

“Windows  95  to  support  multimedia  ex¬ 
tensions!” 

Which  brings  me  back  to  the  desktop. 

Unless  you  do  something  fast,  Microsoft 
will  use  .Net  to  mop  the  floor  with  Java  on 
the  client  side.  Once  again,  this  has  noth¬ 


ing  to  do  with  any  tangible  benefit  inherent  in  using 
.Net,  least  of  all  performance.  If  Java  already  runs 
faster  than  Microsoft  C,  then  what’s  the  point  of  us¬ 
ing  C#  instead  of  Java?  (See  “Binaries  vs.  Byte-Codes” 
at  www.aceshardware.com/Spades/read.phpParticle_ 
id=153  for  benchmark  results.)  But  people  are  going  to 
go  with  C#  because  the  applications  look  good.  The 
stuff  in  my  cat’s  litter  box  looks  better  than  the  Java 
user  interface. 

To  beat  C#  and  .Net,  you’ve  got  to  go  for  the  glitz. 
Hire  the  best  artists  on  the  planet  to  make  the  Swing 
user  interface  so  devastatingly  gorgeous  that  pro¬ 
grammers  will  rip  down  their  posters  of  Vanessa 
Williams  to  make  room  for  Swing  screenshots.  Make 
it  so  much  to  die  for  that  people  create  Swing  skins 
for  every  media  player,  Xll  Window  manager  and 
most  of  all,  for  Windows.  Oh,  and  with  all  due  re¬ 
spect  to  Benny  Goodman,  I  think  it’s  high  time  we 
lose  the  name  Swing,  huh? 

Now  here’s  the  secret  weapon  I’ve  been  saving  for 
last.  (Don’t  worry,  I’m  sure  Microsoft  never  reads  this 
column.)  Ring  up  Nvidia,  ATI  and  anyone  else  you 
can  find.  Convince  them  to  modify  their  graphical 
processing  chips  to  render  as  much  of  the  Java  user 
interface  as  possible  in  hardware,  especially  fonts  and 
layout  management.  It  would  be  wonderful  to  give 

the  user  interface  lightning-fast  rendering 
of  breathtaking  3-D  effects  and  color 
blending.  But  what  you  really  want  is  to  be 
able  to  choose  any  font  and  have  the  dis¬ 
play  card  resize  and  rearrange  every  label, 
button,  tool  bar  and  text  box  flawlessly  and 
instantaneously,  no  matter  what  operating 
system  platform  you’re  using. 

Make  the  Java  user  interface  that  appeal¬ 
ing,  fast  and  platform-neutral,  and  the 
style  will  become  so  ubiquitous  that  peo¬ 
ple  will  forget  what  Windows  used  to  look 
like.  If  you  need  any  more  tips,  let  me 
know.  I 
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Grid  computing  has  attract¬ 
ed  a  lot  of  attention  recently 
as  companies  have  begun  to 
promote  the  concept  of  ac¬ 
cessing  unlimited  comput¬ 
ing  power  from  anywhere  in 
the  world  as  easily  as  users 
now  log  on  to  the  Internet. 
While  that  sounds  revolutionary,  it’s 
really  an  incremental  step  with  a  great 
deal  of  developmental  history  behind 
it.  In  fact,  enterprises  of  all  types  are 
already  using  a  simple  form  of  grid 
computing  within  their  firewalls  to 
economically  meet  processing  needs. 

Just  as  storage-area  networks  (SAN) 
virtualized  enterprise  storage  needs, 
grid  computing  virtualizes  processing 
power.  With  it,  a  process  doesn’t  run 
on  a  specific  assigned  CPU  in  a  partic¬ 
ular  box;  rather,  it  goes  to  any  available 
processor  in  the  network.  A  small  task 
uses  a  single  CPU,  while  larger  jobs 
are  split  up  and  run  on  multiple  CPUs 
simultaneously.  The  jobs  can  be  as¬ 
signed  using  either  a  centralized  or 
peer-to-peer  structure.  Once  limited 


to  university  research  clusters,  grid 
computing  is  making  inroads  into  the 
business  community,  offering  super¬ 
computer  performance  at  PC  prices. 

At  Montreal-based  Caprion  Pharma¬ 
ceuticals  Inc.,  for  example,  a  four-CPU 
server  needs  720  hours  to  analyze  a 
single  biological  sample  from  one  of 
Caprion’s  eight  mass  spectrometers. 
Mixed  in  with  these  resource-intensive 
computational  cycles  is  a  constant 
stream  of  smaller  tasks.  The  company 
turned  to  grid  computing  to  efficiently 
address  the  mix  of  large  and  small  jobs 
on  a  single  platform. 

“Biotechnology  changes  so  rapidly 
that  12  months  from  now,  we  could  be 
doing  very  different  kinds  of  comput¬ 
ing,”  says  Paul  Kearney,  director  of 
bioinformatics.  “We  need  a  flexible 
computing  platform  that  not  only 
meets  today’s  needs,  but  the  future 
ones  we  don’t  know  about  yet.” 

If  you  feel  confused  on  the  subject 
of  grid  computing,  you’re  not  alone. 
“People  envision  grid  computing  as 
meaning  everyone  being  connected 


planetwide,”  explains  Gordon  Haff,  an 
analyst  at  Illuminata  Inc.  in  Nashua, 
N.H.,  a  consulting  firm  that  specializes 
in  large-scale  computing.  “That  is  only 
part  of  it,  and  largely  a  future  part.” 

Grid  computing  follows  along  the 
development  track  of  technologies 
such  as  the  Object  Management 
Group’s  Common  Object  Request 
Broker  Architecture,  Microsoft  Corp.’s 
Distributed  Component  Object  Model 
(DCOM)  or  the  Open  Group’s  Distrib¬ 
uted  Computing  Environment  (DCE). 
More  recently,  the  Globus  Project 
(www.globus.org)  has  developed  stan¬ 
dards  for  large-scale  computing  over 
the  Internet. 

“Organizations  have  been  doing  grid 
computing  for  10  years,”  says  Stacey 
Quandt,  an  analyst  at  Giga  Information 
Group  Inc.  in  Cambridge,  Mass.  “Peo¬ 
ple  are  talking  about  it  now  because 
of  the  potential  global  grid,  but  many 
already  have  grids.” 

Examining  the  Options 

There  are  three  main  types  of  grid: 
cluster,  campus  and  global.  The  defini¬ 
tions  aren’t  set  in  stone.  Rather,  they 
represent  rough  divisions  on  the  con¬ 
tinuum  of  ways  in  which  organizations 
can  share  computing  power. 

Sun  Microsystems  Inc.  reports  that 
of  the  5,000  organizations  currently 
using  its  Sun  Grid  Engine  software, 
90%,  or  about  4,500,  use  it  for  cluster 
grids,  about  450  use  it  for  campus  grid 
installations  and  50  for  global  grids. 

Cluster  grids  consist  of  either  linked 
servers  and  systems  or  just  systems 
in  a  single  location  serving  the  same 
project  or  business  unit.  In  addition  to 
providing  more  effective  use  of  server 
resources,  such  a  cluster  can  also  cap¬ 
ture  unused  workstation  CPU  time  for 
large  processing  cycles. 

Caprion’s  cluster  grid  was  installed 
in  September  in  a  server  room  built 
from  scratch  using  Sun  Microsystems’ 
Sun  Fire  4800,  3800  and  280R  servers 
running  Solaris  8,  with  a  5TB  online 
Oracle8i  database.  Sun’s  Grid  Engine 
distributes  tasks  among  76  CPUs.  It 
can  assign  a  single  job  to  all  of  the 
CPUs  for  maximum  processing  speed 
or  run  many  jobs  simultaneously. 

The  cluster  grid  has  enabled  Capri¬ 
on  to  take  on  a  job  consisting  of  run¬ 
ning  several  large-scale  experiments 
that  will  take  two  to  three  months 
to  complete. 

“We  wouldn’t  have  even  considered 
doing  those  experiments  if  it  required 
months  of  putting  in  a  new  computing 
platform  or  rearranging  the  hardware,” 
says  Kearney.  “But  the  grid  software  has 
made  it  relatively  easy  to  reorganize  our 


WHAT  IS 

GRID  COMPUTING? 

% 

Grid,  or  distributed,  computing  is 
the  aggregating  of  processing 
power  possessed  by  different 
servers  or  workstations  into  a 
single  resource.  A  single  large  job 
can  be  split  into  smaller  pieces  and 
run  on  several,  or  several  thou¬ 
sand,  computers  simultaneously, 
producing  supercomputer  speed 
from  off-the-shelf  hardware. 


computer  farm  for  the  job  at  hand.” 

Campus  computing,  which  allows 
several  projects  or  departments  in  an 
organization  to  share  resources  scat¬ 
tered  across  a  campus,  is  the  next  step 
up  from  clusters.  For  example,  the 
accounting  department  may  tap  into 
the  personnel  department’s  server 
CPUs  when  running  a  series  of  com¬ 
plex  financial  forecasts,  or  the  engi¬ 
neering  department  may  schedule  its 
large  jobs  to  run  at  night,  using  the 
processing  power  of  all  the  company’s 
workstations,  to  have  the  results  by 
morning.  Campus  grids  use  the  organi¬ 
zation’s  network  to  transfer  data  be¬ 
tween  resources  in  various  locations. 

Setting  up  a  campus  grid  introduces 
technical  complexity  because  of  band¬ 
width  and  delay  problems,  as  well  as 
organizational  challenges. 

“You  need  to  take  into  account  the 
social  engineering,  not  just  the  tech¬ 
nology,”  Quandt  points  out.  “You’re 
setting  up  an  infrastructure  where 
some  departments  or  users  take  pri¬ 
ority  over  others.” 

He  also  points  to  financial  and  secu¬ 
rity  issues.  If  one  department  is  using 


GLOSSARY 

Campus  grid  computing:  Distributed 
computing  across  one  organization,  usually 
in  one  geographic  location. 

Clustering:  A  cross  between  parallel 
processing  and  distributed  computing. 
Networked  computers,  on  a  local  level, 
work  together  just  like  a  parallel  machine. 
Although  the  work  is  split  across  multiple 
computers,  they  behave  in  a  parallel  fashion. 

Local  distributed  computing:  Distrib¬ 
uted  computing  used  on  a  local  level,  gener¬ 
ally  on  a  local-area  network.  Local  refers  to 
an  enclosed  space,  building  or  area,  such  as 
a  university  or  an  office. 


To  meet  growing  demands 
for  processing  power,  companies 
are  finding  distributed  computing 
systems  a  low-cost,  scalable 
alternative,  by  drew  robb 
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another  department’s  servers,  for  in¬ 
stance,  this  needs  to  be  reflected  in 
cost  analyses.  If  security  requirements 
vary  among  departments,  policies  must 
be  set  to  accommodate  the  disparity. 

Despite  such  challenges,  some  com¬ 
panies  have  operated  grid  computing 
for  years.  Hartford,  Conn.-based  Pratt 
&  Whitney,  a  division  of  United  Tech¬ 
nologies  Corp.,  began  using  distributed 
computing  in  the  early  1990s  to  model 
jet  engines  and  gas  turbines.  Relying  on 
physical  testing  of  the  hardware  proved 
to  be  too  expensive  and  too  slow. 

“Building  the  hardware  for  a  single 
test  can  run  into  the  millions  of  dol¬ 
lars  and  take  months,”  says  Pete  Brad¬ 
ley,  associate  fellow  for  high-intensity 
computing  at  Pratt  &  Whitney.  “We 
switched  to  large-scale  numerical 
simulations.” 

To  boost  processing  power,  the  com¬ 
pany  installed  Markham,  Ontario-based 
Platform  Computing  Inc.’s  Platform 
LSF  software  on  5,000  workstations 
and  150  servers  at  five  locations  in  the 
U.S.  and  Canada.  Machines  are  con¬ 
nected  over  100M  bit/sec.  Ethernet. 

The  grid  mainly  executes  simula¬ 
tions  at  night  on  the  unused  Sun  work¬ 
stations  and  desktops.  A  typical  task  is 
assigned  to  20  to  40  processors.  If  there 
aren’t  enough  processors  available  at 
one  campus,  the  activity  is  transferred 
to  another.  Single  jobs  are  never  split 
between  two  campuses  because  of 
line  delays. 

The  grid  cut  engineering  time  and 
development  costs  in  half  for  jet  en¬ 
gine  compressor  designs.  As  an  added 
bonus,  the  software  lets  Pratt  &  Whit¬ 
ney  execute  thousands  more  simula¬ 
tions  than  before. 

“Grid  computing  has  saved  us  a  for¬ 
tune  by  making  it  unnecessary  to  pur¬ 
chase  dedicated  servers  for  this  kind  of 
work,”  says  Bradley.  “But  more  impor- 


Common  Object  Request  Broker  Archi¬ 
tecture  (C0RBA):  A  set  of  standards  from 
the  Object  Management  Group  for  distrib¬ 
uted  technologies  and  objects.  C0RBA 
is  platform-neutral  and  quite  popular.  Its 
technology  allows  communication  between 
distributed  objects.  CORBA’s  equivalents 
are  the  Open  Group’s  DCE  and  Microsoft's 
DCOM  system. 

Parallel  processing:  A  type  of  distributed 
computing  that  distributes  the  workload 
across  multiple  processors  within  one  com¬ 
puter  instead  of  distributing  it  across  multiple 
computers.  It  provides  better  speed  and 
communication  than  distributed  computing, 
but  it's  not  widely  used  due  to  the  difficulty 
of  programming  for  parallel  machines. 


tant,  increased  capacity  allows  us  to 
accelerate  technology  development.” 

Some  companies  develop  unique 
grid  strategies.  Cognigen,  a  Buffalo, 
N.Y.-based  biotechnology  firm,  for 
example,  uses  an  application  devel¬ 
oped  by  the  University  of  California 
called  NON-linear  Mixed  Effects  Mod¬ 
eling  (NONMEM)  for  analyzing  phar¬ 
maceutical  clinical  trial  results  and 
extrapolating  what  the  results  would 
be  on  a  larger  population.  Although 
NONMEM  isn’t  designed  for  multi¬ 
threading,  Cognigen  still  uses  Sun’s 
Grid  Engine  to  manage  multiple  jobs 
simultaneously,  sending  one  job  to 
each  processor  and  then  notifying  the 
users  when  the  job  is  done.  The  com¬ 
pany  estimates  that  this  has  saved  each 
scientist  four  to  five  hours  per  week. 

Worth  It  for  Everyone? 

Grid  computing  is  being  successfully 
applied  in  thousands  of  enterprises, 
but  that  doesn’t  mean  it  works  for 
everyone.  While  a  quick  look  at  CPU 
usage  statistics  in  most  organizations 
reveals  vast  untapped  computing 
power,  it’s  not  always  possible  to  cap¬ 
ture  that  power  economically.  In  the 
end,  the  theoretical  absolute  of  grid 
computing  —  using  any  computing  re¬ 
sources,  anywhere,  anytime  —  isn’t 
physically  possible,  nor  is  it  necessary. 

“There  are  lots  of  processors  sitting 
around  in  microwave  ovens  and  appli¬ 
ances  that  no  one  in  their  right  mind 
would  want  to  attempt  to  connect  to 
a  global  grid,”  says  Illuminata’s  Haff. 
“The  efficiency  of  grid  computing 
sounds  good,  but  it  doesn’t  make  sense 
for  most  companies.” 

It’s  not  worth  spending  the  time  and 
money  setting  up  a  grid  to  save  a  few 
nanoseconds  on  a  word  processing 
document,  for  instance.  But  on  the 
other  hand,  number-crunching  mega¬ 
applications,  which  can  be  split  into 
small  pieces  and  run  in  parallel,  and 
are  highly  repeatable  and  require  mini¬ 
mal  disk  I/O,  are  ideal  for  a  grid  setup. 

In  addition  to  biotechnology  and 
engineering  applications,  grid  comput¬ 
ing  is  probably  of  most  value  in  fields 
such  as  petroleum  exploration,  mater¬ 
ial  sciences,  crash  simulations,  finan¬ 
cial  market  modeling,  motion  picture 
special  effects  and  weather  forecasting. 

“Organizations  that  are  using  it  are 
the  same  ones  that  15  years  ago  would 
have  been  using  Cray  computers,”  says 
Sleeper.  “By  going  for  a  distributed  ap¬ 
proach,  they  achieve  the  same  power 
at  lower  cost.”  I 


Robb  is  a  freelance  writer  in  Tujunga, 
Calif. 
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Sharing  within  one  department  or  project 


Cluster  grids  consist  of  linked  systems  in  a  single  location  serving  users 
who  are  working  on  the  same  project  or  in  the  same  business  unit. 
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Sharing  within  one  organization 
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(  Campus  grids  allow  several  projects  or  departments  within  an  organization  to  share  resources.  ) 


_ Global  Grid _ 

Sharing  among  separate  companies  or  individuals 


(  Global  grids  connect  computing  resources  beyond  the  firewall,  over  an  extranet  or  the  Internet.  ) 


#1  in  BusinessWeek’s  2001  Buying  Guide 

Compaq  Evo  Notebook  N600c 

Mobile  Intel®  Pentium®  III  Processor  1.20GHZ-M 

Designed  to  meet  the  needs  of  Winner,  Network  World  Best  of  the 

professional  road  warriors  jests  Award,  Nov.  2001 

Compaq  ProLiant  DL380  Server 

Intel®  Pentium®  III  Processor  1.13GHz 

The  first  density-optimized  server  to  provide 
enterprise-class  availability  and  performance 
all  in  a  2U  form  factor 


Best  Desktop  PC,  Best  of  COMDEX 
Compaq  Evo  D500  Ultra-Slim  Desktop 

Intel®  Celeron®  Processor  1.30GHz 

Leading  the  evolution  of  the  desktop  PC 


1st  Class  Award,  Mobile  Computing, 
Feb.  2002 

Compaq  iPAQ  H3835  Pocket  PC* 

Powerful  and  expandable  pocket  PC  that 
enables  you  to  connect  to  your  office 


Compaq  Evo  Notebook  Compaq  ProLiant 
N600c  DL380  Server 


Compaq  Evo  D500  Compaq  Evo  Notebook 

Ultra-Slim  Desktop  N180 


$2,799 


Lease  for  as  low  as  $94 


Award-winning  integrated  wireless 
solution  via  MultiPort  technology 
Extended  battery  life  through  hot-swap 
battery  capability 

Mobile  Intel®  Pentium®  III  Processor 
1.20GHz-M 


•  14"  CTFT  SXGA+  and  32MB  DDR  Video 


Memory 

•  MultiPort  Wireless  Capable 

•  MultiBay  DVD-ROM/CD-RW  Combo  Drive 

•  Dual  Battery  Support 

•  30GB  Hard  Drive 


•  256MB  SDRAM,  1024MB  max 

•  56k  V.90  Modem  +  10/100  NIC 

•  3-year  limited  warranty1 


$3,528 


Lease  for  as  low  as  $118 


•  Intel®  Pentium®  III  Processor  1.26GHz 

•  256MB  Total  SDRAM  133MHz 
(2x128) — Included 

•  Integrated  Smart  Array  5i  Controller 

•  Hot  Plug  Drive  Cage-Ultra3  (5  x  1" 
and  1  x  1.6") 

•  18.2GB  Pluggable  Ultra3  SCSI  10,000 
rpm  Hard  Drive  (1") 

•  Standard  Quick  Deployment  Rails 

•  SmartStart  &  Compaq  Insight  Manager 

•  3-year  limited  warranty1 


$699 


Lease  for  as  low  as  $24 


•  Integrated  MultiPort  wireless  and 
MultiBay  (optional)  technologies  in  a 
very  small  form  factor 

•  Pre-failure  replacement  warranty  on 
hard  drives 

•  Hot-swap  MultiBay  technology 
provides  synergy  with  notebooks 

•  Optional  MultiBay  24X  CD-ROM  Drive 

•  Intel®  Celeron®  Processor  1.30GHz 


•  128MB  SDRAM,  512MB  max 

•  20GB  Ultra  ATA/100  Hard  Drive 

•  Integrated  Intel®  Pro/100  NIC 

•  Limited  warranty  with  three  years  parts, 
labor  and  on-site  service1 

•  Monitor  not  included 


$1,699 


Lease  for  as  low  as  $57 


Perfect  for  high-end  applications  and 
digital  video  editing 


•  Largest  viewing  display  in  a  Compaq 
notebook 

•  Mobile  Intel®  Pentium®  III  Processor 
l.OOGHz-M 

•  15"  CTFT  XGA  and  16MB  DDR  Video 


Memory 

•  DVD-ROM  Drive 

•  20GB  Hard  Drive 


•  256MB  SDRAM,  1024MB  max 

•  56k  V.92  Modem  +  10/100  NIC 

•  1-year  limited  warranty1 


Compaq  PCs  use  genuine  Microsoft®  Windows® 
www.microsoft/piracy/howtotell 

Prices  reflect  current  Internet  list  pricing  at  time  of  printing  and  are  subject  to  change.  'The  Compaq  iPAQ  H3835  Pocket  PC  is  a  retail  model  that  is  feature  equivalent  to  the  iPAQ  H3850  Pocket  PC  commercial  model.  **1  Lease  products  available  through 
Compaq  Financial  Services  Corporation  (CFSC)  to  qualified  commercial  customers  in  the  U.S.  and  are  subject  to  credit  approval  and  execution  of  standard  CFSC  documentation.  Monthly  lease  payments  are  based  on  48-month  lease  term,  and  do  not  include 
taxes,  fees  or  shipping  charges.  Lessee  has  the  option  to  purchase  the  equipment  at  the  end  of  the  lease  term  at  its  then  fair  market  value  (FMV).  Other  fees  and  restrictions  may  apply.  CFSC  reserves  the  right  to  change  or  cancel  this  program  at  any  time 
without  notice,  la  0%  lease  offer  is  a  lease  with  a  fair  market  value  purchase  option  at  the  end  of  the  lease  term.  The  monthly  lease  payments  are  calculated  at  a  0%  implicit  lease  rate,  assuming  the  lessee  does  not  exercise  the  purchase  option  at  the  end 
of  the  lease  term  and  timely  return  of  the  leased  equipment  to  CFSC  at  the  end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee  other  than  rent  payments  (such  as  taxes,  fees  and  shipping  charges).  Lease  terms  of  up  to  30  months  are 
available  for  qualifying  transactions  above  $499.  Cost  of  operating  system  software  and  Compaq  Services  qualify  for  special  financing  rates.  Some  product  restrictions  may  apply.  Other  restrictions  may  apply.  This  offer  is  valid  through  June  28, 2002.,Certain 
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WHAT  MAKES  COMPAQ  TECHNOLOGY  SO  VALUABLE? 

ASK  THE  CRITICS. 


What  makes  a  best  buy?  How  about  advanced  technology, 
practical  versatility,  responsive  technical  support.  And  those 
are  just  a  few  of  the  many  qualities  that  put  Compaq  at  the 
top  of  every  shrewd  purchaser’s  list. 

Compaq  CarePaq  Services  provide  a  variety  of  upgrades  to 
enhance  the  base  warranty  on  your  Compaq  products. 
Lease  for  $0  down,  0%  interest  monthly.** 


Compaq  ProLiant  ML350  Compaq  Evo  D300v 
Server  Microtower 


Compaq  iPAQ  H3850 
Pocket  PC 


$2,428 


Lease  for  as  low  as  $81 


Provides  the  perfect  balance  of  price  and 
performance 


•  Intel®  Pentium®  III  Processor  1.26GHz 

•  128MB  Total  SDRAM  133MHz 
(1x128) — Included 

•  Integrated  Dual  Channel  Wide-Ultra3 
SCSI  Adapter 

•  Hot  Plug  Ultra3  Cage  6  xl"  Cage — Included 

•  18.2GB  Pluggable  Ultra3  SCSI  10,000  rpm 
Hard  Drive  (1") 

•  SmartStart  &  Compaq  Insight  Manager 

•  3-year  limited  warranty* 


$569 


Lease  for  as  low  as  $19 


Affordable  business  computing  solution 


•  Intel®  Celeron®  Processor  1.30GHz 

•  48X  CD-ROM  Drive 

•  128MB  SDRAM,  512MB  max 

•  20GB  Ultra  ATA/100  Hard  Drive 

•  Integrated  Intel®  Pro/100  NIC 

•  Microsoft®  Windows®  XP  Professional 

•  Limited  warranty  with  one  year  parts,  labor 
and  on-site  service* 

•  Monitor  not  included 


$599 


Lease  for  as  low  as  $20 


•  206MHz  Intel®  5trongARM  Processor 
SA-1110  32-bit  RISC 

•  64MB  SDRAM,  32MB  Flash  ROM  Memory 

•  Reflective  TFT  Display  with  64K  colors 

•  Built-in  secure  digital  slot  for  memory 
expansion 

•  Microsoft®  Pocket  PC  2002  Operating 
System  with  Pocket  Outlook  and 
Pocket  Office 

•  Handwriting  recognition,  virtual  keyboard, 
character  recognition 

•  1-year  limited  warranty* 


For  latest  pricing  and  availability,  call  toll  free 

Buy  direct  from  Compaq  at  888-349-5559, 
compaq.com/awardwinning/cworld, 
or  visit  your  local  reseller. 
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TOMMY 


By  the  Rues 


Policy-based  storage  management  is 
making  inroads  in  the  enterprise  as 
newtools  emerge.  By  Lucas  Mearian 


CHESAPEAKE  ENERGY  CORP.  —  One 
of  the  largest  independent  natur¬ 
al  gas  companies  in  the  country 
—  uses  about  two-dozen  storage 
management  policies.  The  poli¬ 
cies  determine  what  information  the 
Oklahoma  City-based  firm  wants  to 
keep  and  where  it  wants  to  store  it. 

Chesapeake  Energy  systems  engi¬ 
neer  Jay  Newton  says  that  software 
from  CommVault  Systems  Inc.  in 
Oceanport,  N.J.,  has  allowed  him  to  use 
those  policies  to  design  an  automated 
backup  scheme  that  reduced  backup 
times  from  hours  to  about  20  minutes. 

“All  I’m  doing  is  defining  how  long  I 
want  to  keep  something.  When  I  set  up 
a  server  for  backup,  I  set  the  policy  for 
it,  and  that  determines  how  long  it  gets 
kept,”  Newton  says,  referring  to  the 
amount  of  time  until  a  file  is  erased  or 
ejected  from  the  tape  library  used  for 
long-term  storage.  “I’ve  had  this  in 
production  for  nine  months,  and  I 
haven’t  had  to  touch  [the  servers]  yet.” 

As  production-scale  storage-area 
networks  (SAN)  are  increasingly  de¬ 
ployed  throughout  large  enterprises, 
the  resulting  increase  in  nodes  and 
network  connections  has  become 
more  unwieldy  to  manage  manually.  In 
response,  software  tools  meant  to  au¬ 
tomate  storage  resource  management 
using  policies  are  finding  a  place  in  the 
enterprise. 

Known  as  policy-based  storage  man¬ 
agement,  the  software  offerings  from 
industry  leaders  such  as  Veritas  Soft¬ 
ware  Corp.,  Legato  Systems  Inc.,  EMC 
Corp.  and  IBM,  as  well  as  from  lesser- 
•  ■  vn  start-ups,  automatically  allo¬ 


cate  storage  space  to  end  users,  bal¬ 
ance  the  loads  on  servers  and  disk  ar¬ 
rays,  and  reroute  networks  when  sys¬ 
tems  go  down  —  all  based  on  policies 
set  up  by  systems  administrators. 

For  example,  policy-based  storage 
management  software  could  monitor 
storage  headroom,  and  when  the  vol¬ 
ume  approached  a  specified  threshold, 
an  automated  policy  would  dictate  that 
more  storage  be  allocated  from  an 
available  disk  pool,  avoiding  server 
downtime. 

Most  current  incarnations  of  policy- 
based  software  are  used  to  alert  ad¬ 
ministrators  through  e-mail  or  dash¬ 
boardlike  displays  but  don’t  automati¬ 
cally  correct  the  problem,  says  Bill 
North,  director  of  storage  software  re¬ 
search  at  IDC  in  Framingham,  Mass. 

To  reach  true  policy-based  storage 


management,  North  and  others  say  the 
hour-to-hour,  day-to-day  control  of 
storage  systems  must  shift  completely 
to  the  computer.  But  IT  administrators 
aren’t  quite  comfortable  with  giving  up 
that  level  of  control,  says  North.  “As 
trust  goes  up,  the  ability  to  truly  auto¬ 
mate  will  go  up  as  well,”  he  says. 

In  December,  Bell  Canada  Interna¬ 
tional  Inc.  in  Montreal  finished  rolling 
out  a  policy-based  product  on  its  17TB 
SAN  that  automatically  allocates 
200MB  of  server  space  per  user  along 
with  thresholds  alerts  and  the  ability 
to  filter  out  improper  files  and  gener¬ 
ate  reports. 

“Once  we  got  software  installed  and 
started  generating  reports,  even  before 
developing  [automated]  policies  ...  it 
gave  us  ammo  to  go  to  the  user  and  say, 
According  to  company  policy,  you’re 
not  allowed  to  have  these  files,’  ”  says 
Steven  Varin,  a  business  analyst  in  the 
CIO’s  office  at  Bell  Canada.  “Once  we 
started  the  [automated]  policy  and 
started  finding  files,  we  almost  fell 
back  on  our  butts.” 

What  systems  administrators  at  Bell 
Canada  found  is  common,  according  to 
analysts:  MP3  music  files,  movies  and 
other  files  for  personal  use.  They  also 
discovered  that  about  50%  of  compa¬ 
ny-generated  data  on  disk  should  have 
been  archived  on  tape. 

By  filtering  out  the  unwanted  data, 
Bell  Canada  freed  up  about  3TB,  or 
$250,000  worth,  of  disk  space.  In  turn, 
the  company  brought  the  availability 
of  its  application  servers  from  85%  to 
99%  and  reduced  its  backup  window 
by  10%. 

“We  would  have  had  to  implement 
another  6TB  of  disk  space  just  to  hold 
our  own  to  get  to  the  end  of  2001.  The 
cost  of  that  would  have  been  enor¬ 
mous  —  over  a  half-million  dollars,” 
Varin  says.  “I’ve  been  sleeping  a  lot 


The  Benefits 

Proponents  say  policy-based  storage 
management  can  provide  substantial 
benefits,  including  the  following: 

■  Application  downtime  is  minimized 

by  setting  uptime  parameters. 

■  Backup  windows  are  spread  out 

over  an  extended  period,  with  small 
blocks  of  data  backed  up  regularly  in¬ 
stead  of  everything  being  backed  up  in 
one  long  procedure. 

■  Storage  resources  are  maximized 

because  servers  and  storage  arrays  are 
automatically  load-balanced  to  meet  ap¬ 
plication  demands. 

■  Disparate  hardware  can  operate  as 

if  in  a  homogeneous  environment. 


better  now.” 

But  Raymond  Paquet,  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn.,  says 
he  believes  policy-based  storage  man¬ 
agement  is  simply  “a  bunch  of  buzz¬ 
words  strung  together.  The  reality  is, 
in  order  to  have  a  policy-based  man¬ 
agement  tool,  you  must  first  have  a 
policy-based  engine  —  an  umbrella 
that  goes  out  to  take  policy  and  imple¬ 
ment  it.” 

Marc  Farley,  an  independent  storage 
consultant,  agrees,  saying  that  storage 
hasn’t  been  policy-driven  but  that  poli¬ 
cy  engines  are  starting  to  emerge  with 
the  growth  of  enterprisewide  SANs. 

“The  first  products  that  have  had  it 
are  backup  and  recovery  products, 
replication  products  —  those  sorts  of 
things  for  disaster  tolerance  and  data 
protection,”  Farley  says.  “But  I  think 
you’re  going  to  see  other  products 
coming  in  that  start  looking  at  manag¬ 
ing  SANs.” 

Paquet  criticizes  automated  backup 
policies,  saying  that  true  policy-based 
resource  management  must  be  con¬ 
nected  with  restore  capabilities. 

“Backup  doesn’t  matter.  It’s  utterly 
unimportant.  We  only  do  that  because 
we  want  to  perform  recovery.  We 
shouldn’t  have  a  backup  policy;  we 
should  only  have  a  recovery  policy,” 
Paquet  says.  “In  an  ideal  world,  I’d  like 
to  sit  in  front  of  my  engine  and  have 
recovery  that  occurs  in  eight  hours  and 
with  zero  loss.  This  policy  manage¬ 
ment  tool  should  spit  out  what’s  re¬ 
quired  for  that.”  ► 


For  more  on  Bell  Canada’s  imple¬ 
mentation  of  policy-based 
storage  management,  visit  our 
Web  site:  www.computerworld.com/q728974 


Types  of  Storage  Policies 


EXPLICIT 

These  policies  are  defined  by  users  to  achieve  service-level  objec¬ 
tives.  They  have  parameters  such  as  RAID  levels,  number  of  mirrors  or 
zoning  requirements.  Explicit  policies  also  allow  for  user  rankings  based 
on  the  level  of  importance.  These  policies  are  used  by  the  system  to  priori¬ 
tize  and  select  from  the  available  resources  in  the  storage  system. 

RULE 

These  policies  consist  of  an  event  condition  action.  They’re  used  to 
handle  escalation,  notification  and  activation  of  various  processes,  includ¬ 
ing  the  automatic  execution  of  storage  management  scenarios.  These 
policies  trigger  on  user  and  system  parameters.  Examples  of  rule  policies 
include  user-defined  thresholds  such  as  file  system  utilization. 

CONSTRAINT 

These  policies  express  constraints  on  managed  objects  such  as 

Fibre  Channel  switches,  directors  or  storage  arrays.  They  may  be 
used  to  tell  the  system  what  can’t  be  done  on  a  particular  device. 
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TECHNOLOGYFUTURE WATCH 


Wearable  computers  will  get  sleeker, 
cheaper  and  more  functional.  But  social 
issues  will  intrude.  By  Matt  Hamblen 


The  MIT  Media 
Laboratory’s 
MIThrill  Smart 
Vest 


Wearable  computers  al¬ 
ready  play  a  part  in  our 
lives  and  will  grow  in¬ 
creasingly  commonplace 
and  sophisticated,  but  researchers  be¬ 
lieve  we  are  still  far  from  becoming  a 
society  of  cyborgs. 

Today,  it  isn’t  unusual  to  see  data- 
capable  cell  phones  worn  on  belts  and 
attached  by  wires  to  headsets.  Service 
technicians  are  beginning  to  wear 
ruggedized  computers  on  their  wrists, 
hips  or  chests  connected  to  head- 
mounted  displays  (HMD)  with  small 
viewing  windows  capable  of  showing 
detailed  Web  pages  with  maps  and 
parts  diagrams.  Voice  recognition 
capability  helps  with  data  in¬ 
put  and  computing 
commands. 


Coming  generations 
of  wearables  will  be 


enhanced  by  the  minia¬ 
turization  of  parts,  a 
greater  sense  of  fashion 
and  use  of  Bluetooth  and 
other  wireless  technolo¬ 
gies  to  replace  the  wires 
that  connect  compo¬ 
nents,  some  experts 
say.  Nanotechnology 
will  also  play  a  role 
in  wearables  in  the 


next  10  years,  making 
computing  and  com¬ 
munications  systems 


microscopic  in  size. 

But  the  limits  on 
these  future  wearable 
technologies  are  pri¬ 
marily  social,  some  an¬ 
alysts  believe,  posing 
potential  challenges 
for  managers  who  may 
have  to  cope  with  work¬ 


ers  who  reject  being  constantly  con¬ 
nected  to  data  and  commands. 

By  2006,  “the  social  impact  of  wire¬ 
less  and  wearables  —  in  particular,  pri¬ 
vacy  issues  —  will  be  an  ongoing 
source  of  concern  and  business  oppor¬ 
tunity,”  says  Jackie  Fenn,  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn. 

Gartner  predicts  that  from  2006  to 
2011,  always-on  wireless  wearable  com¬ 
puting  and  communication  devices 
will  become  mainstream.  About  60% 
of  the  European  and  U.S.  populations 
ages  15  to  50  will  wear  a  wireless  com¬ 
munications/computing  device  at  least 
six  hours  a  day  in  2007,  and  75%  will  do 
so  in  2010,  Gartner  says. 

Addressing  Style  and  Comfort 

Researchers  have  no  shortage  of 
wearable  computing  prototypes  under 
way.  Xybernaut  Corp.  in  Fairfax,  Va., 
sells  a  wearable  computer  for  service 
personnel.  One  model  boasts  a  500- 
MHz  Celeron  processor  with  256MB  of 
RAM  and  5GB  of  storage,  all  worn  on 
the  belt  or  chest  and  connected  to  an 
HMD.  Xybernaut  spokesman  Mike  Binko 
says  that  users  such  as  commuter  train 
riders  will  find  a  sleek  consumer  ver¬ 
sion,  such  as  Xybernaut’s  $1,499  Poma,  a 
good  way  to  read  documents  in  privacy. 

At  Foster-Miller  Inc.  in  Waltham, 
Mass.,  which  is  conducting  research  on 
wearable  technology,  there’s  an  empha¬ 
sis  on  “deconstructing”  the  wearable 
computer,  says  Douglas  Thomson,  busi¬ 
ness  development  manager.  “Instead  of 
having  boxes  spread  about  the  body,  we 
want  to  distribute  the  technology  more 
by  integrating  components  into  the 
cloth,”  he  says.  Such  integrated  compo¬ 
nents  could  help  airplane  mechanics 
move  about  more  easily  and  fit  into 
smaller  spaces,  for  example.  And  silver 
or  gold  wires  woven  into  fabrics  could 
make  a  vest  or  coat  look  fashionable. 

In  three  years,  it  will  be  possible 
for  the  clothing  itself  to  be  a  network, 
allowing  a  worker  to  move  a  compo¬ 
nent  from  a  hip  to  the  chest,  depending 
on  ergonomic  preference,  experts  say. 
Or  multifunction  modules  that  aren’t 
normally  part  of  the  wearable  suit 
could  be  added,  such  as  language  trans¬ 
lation  or  chemical  detection  compo¬ 
nents  for  public  safety  officers,  Thom¬ 
son  says.  Rechargeable  battery  belts 
could  provide  the  power  required  by 
faster  processors  and  stronger  radios. 

The  Media  Laboratory  at  MIT  has  a 
variety  of  projects  involving  wearable 
communications  gear  under  way,  in¬ 
cluding  MIThrill,  a  “body  bus”  in  a 
Smart  Vest  that’s  designed  to  be  indis¬ 
tinguishable  from  ordinary  clothing. 

MIT  has  been  selected  to  receive  $50 


b* 

LfciJk 

n 

XYBERNAUT  is  already  selling  wearable 
computing  devices  for  service  personnel, 
like  the  models  shown  above. 


million  in  basic  research  funds  from 
the  U.S.  Army  for  the  Institute  of  Sol¬ 
dier  Nanotechnologies.  Nanotech¬ 
nology  research  might  lead  to  individ¬ 
ual  clothing  fibers  designed  to  carry 
electrical  loads  and  function  as  tran¬ 
sistors,  capacitors  or  power  sources, 
says  William  Mullins,  chief  of  synthe¬ 
sis  and  processing  for  the  Research 
Triangle  Park,  N.C.-based  U.S.  Army 
Research  Office. 

Mullins  and  analysts  agree  that  the 
physical  implantation  of  devices  is 
very  far  off.  But  in  the  shorter  term, 
Gartner’s  Fenn  worries  about  what  will 
happen  if  office  workers  are  so  con¬ 
stantly  connected  through  wearables 
that  the  work/leisure  boundary  is 
blurred.  Managers  might  well  expect 
workers  to  access  data  at  any  hour  and 
on  weekends,  she  says. 

But,  she  asks,  wouldn’t  that  require 
the  manager  in  turn  to  consider  allow¬ 
ing  the  worker  to  shop  online  or  do 
some  leisure  reading  on  a  wearable  de¬ 
vice  during  traditional  work  hours?  ► 


Quick 

Link© 


To  read  how  wearable  computers 
are  helping  Bell  Canada's  service 
technicians  save  time,  visit: 

www.com  puterworld.com/q?28604 


And  for  additional  resources  regarding  wearable 
Computers,  go  to:  www.computerworld.com/q?28843 
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TECHNOLOGYQUICKSTUDY 

HOT  TRENDS  &  TECHNOLOGIES  IN  BRIEF 


Power  to  the  Portables 


DEFINITION 

Batteries  convert  the  energy  of  chemical  reac¬ 
tions  into  electrical  energy,  allowing  us  to  use 
portable  devices  ranging  from  hearing  aids  to 
notebook  computers  to  automobiles. 


BY  MATT  HAMBLEN 

T’S  SURPRISING  WHAT 
you  can  make  into  a  bat¬ 
tery.  For  example,  you 
can  actually  make  a 
clock  that  runs  on  two 
potatoes.  But  when  it  comes  to 
portable  electronic  devices,  we 
generally  stick  to  what  we  Find 
at  the  local  RadioShack. 

Some  batteries  (called  pri¬ 
mary  batteries)  are  thrown 
away,  while  others  (secondary 
batteries)  can  be  recharged 
and  reused.  Many  devices, 
from  flashlights  to  radios  to 
some  personal  digital  assis¬ 
tants  (PDA),  use  alkaline  bat¬ 


teries.  Mercury  cells  power 
hearing  aids  and  watches  but 
pose  a  serious  environmental 
threat.  Alkaline  cells  once  had 
significant  mercury  content, 
but  current  units  use  none. 

The  best-known  recharge¬ 
able  batteries  are  lead-acid: 
powerful,  inexpensive,  heavy 
and  bulky  —  great  for  cars  but 
little  else.  Also  familiar  are  the 
rechargeable  nickel-cadmium 
(Ni-Cad)  batteries  used  in  cell 
phones,  handhelds,  toys  and 
portable  tools.  These  relatively 
cheap  cells  can  be  recharged  up 
to  1,500  times.  Nickel  metal 
hydride  (NiMH)  batteries, 


which  are  used  in  small  mo¬ 
bile  devices  and  inexpensive 
laptops,  are  environmentally 
safer  than  Ni-Cad  but  can  be 
recharged  only  about  one- 
third  as  many  times. 

Today,  most  laptops  and  cell 
phones  use  lithium-ion  (Li- 
Ion)  cells,  which  are  three 
times  as  costly  as  NiMH  cells 
but  have  high  energy  density. 
Li-Ion  polymer  batteries  can 
be  molded  to  fit  inside  mobile 
devices  but  are  double  the 
cost  of  Li-Ion  cells. 

Many  experts  feel  that  bat¬ 
tery  development  has  reached 
a  plateau  just  when  cheaper 


and  more  portable  power 
sources  are  needed.  Users 
would  like  a  free,  infinite  pow¬ 
er  source  weighing  next  to 
nothing;  reality  requires  a  re¬ 
movable  power  “brick”  that 
can  take  hours  to  recharge 
batteries  from  a  wall  outlet. 
Devices  are  getting  smaller, 
but  faster  CPUs  and  color  dis¬ 
plays  drain  power.  So  device 
makers  are  becoming  increas¬ 
ingly  reliant  on  software  and 
hardware  to  lessen  battery 
drain. 

“Power  is  the  big  constraint 
today”  on  mobile  computing, 
says  Craig  Mathias,  an  analyst 
at  Farpoint  Group  in  Ashland, 
Mass.  Mathias  says  that  al¬ 
though  Moore’s  Law  states 
that  semiconductor  process¬ 
ing  power  will  double  every  18 
months,  “a  battery’s  effective¬ 
ness  doubles  every  50  years.” 

By  fiddling  with  surface  ar¬ 
eas  and  voltages,  IBM  has  been 
able  to  increase  Li-Ion  battery 
life  for  its  ThinkPad  X  laptop 
from  3.8  hours  to  4.6  hours. 

Future  Charges 

IBM  engineer  Tom  Hildner 
says  he  thinks  that  lithium 
batteries  are  “running  out  of 
steam”  and  that  we  need  bet¬ 
ter  chemistries.  Many  compa¬ 
nies,  including  Electric  Fuel 
Ltd.  in  New  York,  are  focusing 
on  power  alternatives  such  as 
zinc-air  cells.  Others  are  try¬ 
ing  fuel  cells  to  power  laptops, 
handhelds  and  cell  phones. 

While  fuel  cells  might  boost 
density,  users  would  have  to 
carry  extra  fuel  in  a  cartridge. 
Hydrogen  and  methane,  the 
most  likely  potential  fuels,  are 
flammable  materials  that 
aren’t  allowed  on  airplanes. 
Analysts  say  such  fuel  cells 
are  years  off  because  they’re 
too  expensive  and  dangerous. 

One  promising  new  tech¬ 
nology  is  Li-Ion  polymer 
phosphate,  which  is  being  pro¬ 
moted  by  Valence  Technology 
Inc.  in  Austin,  Texas.  Called 
Saphion,  this  new  battery  uses 


Rechargeable  Batteries 


Volts  Energy  Battery  Battery  Price  Battery  Battery  uses 

per  density  discharge  life  per  cell  life 

cell  (Wh/kg)  rate  (hours) 


Ni-Cad 

45 

Moderate 
to  high 

Up  to  1,500 
charge/ 
discharge 
cycles 

95  cents 

3 

Low-end:  cordless  phones, 
PDAs,  handheld  computers, 
portable  hand  tools,  tape 
players  and  toys 

NiMH 

■ 

70 

Moderate 

Up  to  500 
charge/ 
discharge 
cycles 

$1.50 

2.4 

Midlevel:  cordless  phones, 
cell  phones,  laptops,  PDAs, 
handheld  computers  and  oth¬ 
er  portable  devices 

WE,  i.o- 

3.6 

135 

Low 

Up  to  1,000 
charge/ 
discharge 
cycles 

$4 

3.2 

High-end:  cordless  phones, 
cell  phones,  laptops,  PDAs, 
handheld  computers  and  oth¬ 
er  portable  devices 

Li-Ion  polymer 

135 

Low 

Up  to  1,000 
charge/ 
discharge 
cycles 

$8 

3.7 

High-end:  cell  phones,  lap¬ 
tops,  PDAs,  handheld  com¬ 
puters  and  other  portable 
devices 

5- 

Not 

available 

Low 

Not 

available 

$2-$3 

3.88 

Potential  for  backup  power 
systems,  electric  vehicles, 
cordless  power  tools  and 
mobile  electronic  devices 

Down  With 
Power  Drain 

At  Research  In  Motion  Ltd. 

(RIM)  in  Waterloo,  Ontario,  a  maker 
of  wireless  handheld  data  devices, 
the  research  staff  works  under  a 
sign  that  reads,  “Have  you  saved 
your  milliwatt  today?”  But  RIM 
doesn’t  make  batteries,  so  it  focus¬ 
es  on  device  designs  that  “use  the 
battery  appropriately,”  says  Ray  De- 
Paul,  director  of  product  planning. 

RIM  devices  have  become  well 
known  for  their  gray  screens.  "Col¬ 
or  displays  are  terribly  inefficient 
with  batteries,  so  we  made  a  deci¬ 
sion  early  on  not  to  [use  one].”  De- 
Paul  says.  To  save  power,  RIM  de¬ 
vices  turn  off  their  screens  auto¬ 
matically  when  users  put  them  in 
their  belt  holsters. 

The  biggest  battery  drainer  is 
wireless  transmissions.  RIM  has  set 
up  its  messaging  software  so  that 
when  you  reply  to  a  message,  you 
don’t  need  to  send  all  the  history 
back  again.  And  patented  compres¬ 
sion  technology  allows  RIM  to  trim 
a  5KB  message  to  2KB. 

The  result  is  that  the  RIM  Black- 
Berry  950  uses  a  single  AA  alka¬ 
line  battery  that  will  last  about 
three  weeks  under  constant  use,  a 
feature  that  delights  most  users. 
The  larger  RIM  BlackBerry  957 
works  on  a  rechargeable  Li-Ion 
battery,  which  is  usually  recharged 
during  PC  synchronization.  That 
charge  lasts  well  over  a  week  un¬ 
der  constant  use,  RIM  claims. 

-Matt  Hamblen 


environmentally  friendly 
phosphate  and  promises  to  be 
half  as  costly  as  Li-Ion. 

Bottom-line  advice  for  IT 
shops:  Give  users  spare  laptop 
and  cell  phone  batteries,  plus 
recharging  capability.  Also, 
warn  users  that  a  device  can 
lose  data  if  power  is  lost  for 
too  long.  > 


Quick 
I  tnkO 


For  a  discussion 
of  battery  “memory," 
visit  Computer- 
world.com  at 


www.computerworld.com/q?28738 


■  Are  there  technologies  or  issues  you  would  like  to  learn  about  in  QuickStudy?  Please  send  your  ideas  to  quickstudy@computerworld.com. 
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eating  Server 
I/O  Bottlenecks 


OUTLOOK:  InfiniBand 
high-speed  server 
I/O  technology  will 
move  data  center 
servers  toward 
separate,  highly 
scalable  processor 
and  I/O  subsystems. 
By  Lucas  Mearian 

As  server  processor 

speeds  push  the  2-GHz 
mark  and  enterprises 
look  to  Web-enable  ap¬ 
plications  that  require  greater 
server  bandwidth,  network  ad¬ 
ministrators  are  running  into 
I/O  bottlenecks  created  by  the 
current  Peripheral  Compo¬ 
nent  Interconnect  (PCI)  bus. 

Enter  InfiniBand.  This 
emerging  server  I/O  specifica¬ 
tion  promises  to  widen  the 
pipeline  between  clustered 
servers  by  replacing  current 
lGB/sec.  PCI-X  and  Gigabit 
Ethernet  technologies  with  an 
external,  switched  serial  I/O 
fabric  that  supports  data  rates 
of  2.5G  to  10G  bit/sec.  (and 
eventually  30G  bit/sec.)  in 
each  direction. 

Unlike  the  PCI  busmaster 

■  TECH  SPECS 


design,  InfiniBand  will  allow 
multiple  concurrent  links  be¬ 
tween  devices,  increasing 
throughput.  And  it  will  support 
high-speed  interconnection 
with  external  target  devices, 
such  as  RAID  storage,  up  to 
one  kilometer  away.  Infini¬ 
Band  will  also  let  network  ad¬ 
ministrators  separate  servers 
from  storage  and  other  I/O  de¬ 
vices  in  order  to  scale  those 
resources  separately  over  a 
low-latency,  switched  network 
spanning  the  data  center. 

Physically,  InfiniBand  is  a 
simple  parallel  connection. 
The  more  copper  wires  (up  to 
48),  the  higher  bandwidth  you 
get,  says  John  Enck,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.  [QuickStudy,  October 
23,  2000],  InfiniBand’s  initial 
design,  similar  in  topology  to 
Fibre  Channel,  will  connect 
host  channel  adapters  (HCA) 
in  servers  to  devices  with  em¬ 
bedded  target  channel  adapt¬ 
ers  by  way  of  intermediate  In¬ 
finiBand  switches. 

The  technology  will  first 
appear  in  Intel-based  server 
designs  but  should  migrate 
into  midrange  and  high-end 
systems.  Vendors  plan  Infini¬ 
Band  products  that  will  link 
directly  into  a  server’s  CPU 
and  memory  subsystems,  but 


■  AT  A  GLANCE 

InfiniBand 

WHAT  IS  IT? 

A  PCI  successor,  this  scal¬ 
able,  high-speed  switched 
network  connects  clustered 
servers  and  I/O  devices. 

WHAT’S  THE  BENEFIT? 

Servers,  storage  and  other 
I/O  devices  can  be  physical¬ 
ly  separated.  Supports 
speeds  of2.5Gto30G 
bit/sec. 


AVAILABILITY 

Host  bus  adapters  for  exist¬ 
ing  PCI  rackable  servers  are 
due  late  this  year;  onboard 
designs  in  2003  or  2004. 


BEST  APPLICATIONS 

InfiniBand  will  speed  com¬ 
pute-intensive  applications, 
such  as  transactional  data¬ 
bases,  and  storage-inten¬ 
sive  applications. 

CAVEATS 

InfiniBand  adapters  for  ex¬ 
isting  servers  and  storage 
devices  offer  improved  seal- 
ability,  but  performance 
gains  will  be  limited. 


1/0  Evolution  in  the  Data  Center 


PCI 

PCI-X* 

INFINIBAND 

MAXIMUM  I/O 
PERFORMANCE 

500MB/sec. 

IGB/sec. 

500MB/sec.  per  two-wire  link 
(250MB/sec.  each  way); 
up  to  6GB/sec.  on  12  links 

LATENCY 

High 

High 

Very  low 

SCALABILITY 

Limited  to  available 
internal  slots 

Limited  to  available  Extends  outside  the  server  box;  up 
internal  slots  to  64,000  devices  per  subnet 

Legacy  PCI  bus 


Faster  version  of 
the  PCI  parallel  bus 
architecture 


High-speed  serial  bus  architecture 
designed  for  external  1/0  connec¬ 
tivity 


•NOTE  THE  RECENTLY  ANNOUNCED  PCI  X  2  0  SPECIFICATION  WILL  RUN  AT  2GB/SEC 


development  of  such  servers 
is  behind  schedule,  Enck  says. 

The  first  InfiniBand  prod¬ 
ucts,  due  later  this  year,  will 
be  HCAs  that  plug  into  exist¬ 
ing  PCI  and  PCI-X  slots.  They 
will  allow  multiple  connec¬ 
tions  and  separate  scaling  of 
resources,  but  gains  will  be 
limited  until  new  designs  ar¬ 
rive  in  2003  or  2004. 

Fitting  In 

How  will  InfiniBand  affect 
the  data  center?  It  will  likely 
extend,  not  replace,  existing 
interconnects.  “You’ll  have  In¬ 
finiBand  going  out  of  servers 
[and]  into  a  gateway  device 
that  will  then  come  out  Fibre 
Channel  or  Gigabit  Ethernet  or 
some  other  connectivity  into 
the  network,  into  the  storage- 
area  network  or  the  network- 
attached  storage,”  Enck  says. 

InfiniBand  will  likely  be 
used  in  densely  clustered 
blade-server  racks,  says  Ver¬ 
non  Turner,  an  analyst  at  IDC 
in  Framingham,  Mass. 

Some  early  adopters  are  al¬ 
ready  planning  for  InfiniBand. 
Nathan  McQueen,  streaming 
media  systems  architect  at  the 
University  of  Washington  in 
Seattle,  needs  plenty  of  band¬ 
width  as  he  prepares  to  open 
the  institution’s  archives  to 
other  universities  and  the  Cal¬ 
ifornia  state  government.  Mc¬ 
Queen  hopes  to  use  five  to  10 
InfiniBand  gateway  switches 
to  let  his  DB2  database  and 
Web  servers  access  shared  Fi¬ 
bre  Channel-attached  storage. 
Within  a  year,  he  anticipates 
Internet  sharing  of  1  million  to 
2  million  records  per  year. 

McQueen  says  he  believes 
he’ll  have  easier  configuration 
and  greater  speed  and  scalabili¬ 
ty  with  InfiniBand  than  with  a 
Fibre  Channel  network. 

Enck  says  InfiniBand  will 
benefit  applications  such  as 
McQueen’s  because  it  enables 
more  powerful  I/O  connectiv¬ 
ity  for  small-profile  servers. 
“That’s  where  the  value  propo¬ 
sition  is  strongest,”  he  says.  ► 


MniUJ/  To  read  more  about 
1  InfiniBand,  including 
-LdllKJfc*  an  interview  with 
InfiniBand  Trade  Association  Co-Chair¬ 
man  Tom  Bradicich,  visit  our  Web  site: 
www.computerworld.com/q2a1830 
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■  PRODUCT  PIPELINE 

The  (Infini-) 
Bandwagon 

More  than  200  vendors  say  they 
support  InfiniBand,  but  few  have 
announced  product  plans.  Infini¬ 
Band  won't  work  with  servers 
alone:  the  architecture  includes 
switches,  server  host  bus 
adapters  (HBA)  and  target  bus 
adapters  for  1/0  devices  such  as 
storage  server  arrays.  In  addition, 
gateway  devices  may  be  required 
to  connect  systems  to  non-Infini¬ 
Band  resources. 


SERVERS 

Later  this  year,  vendors  including 
Dell  Computer  Corp.,  Compaq 
Computer  Corp.  and  IBM  plan  to 
offer  add-in  InfiniBand  HBAs  for 
some  PCI-based  rack  server 
lines.  Onboard  designs  are  due  in 
2003  or  2004.  Blade  servers 
with  high-speed  InfiniBand  back¬ 
planes  are  also  likely  to  emerge  at 
that  time.  IBM  says  it  plans  to 
migrate  the  technology  into  its 
midrange  and  high-end  systems. 

HOST  BUS  ADAPTERS 

InfiniBand  HBAs  can  retrofit  ex¬ 
isting  server  clusters.  Key  players 
include  Intel  Corp.,  IBM  and  Mel- 
lanox  Technologies  Inc.  in  Santa 
Clara,  Calif. 


SWITCHES  AND  GATEWAYS 

The  first  switches  will  come  from 
start-ups  like  InfiniSwitch  Corp.  in 
Westboro,  Mass.,  as  well  as  from 
established  Fibre  Channel  ven¬ 
dors  like  Brocade  Communica¬ 
tions  Systems  Inc.  in  San  Jose 
and  Qlogic  Corp.  in  Aliso  Viejo, 
Calif.  Start-ups  Voltaire  Inc.  in 
Bedford,  Mass.,  and  Omegaband 
Inc.  in  Austin,  Texas,  provide  Inter¬ 
net  Protocol  network  gateways. 

MANAGEMENT  SOFTWARE 

InfiniBand  won't  work  without 
management  software  for  the 
network  fabric.  Lane  15  Software 
and  VIE0  Inc.,  both  in  Austin,  are 
the  primary  developers. 

TARGET  DEVICES 

The  first  InfiniBand  storage  de¬ 
vices  may  come  from  Hopkinton, 
Mass.-based  EMC  Corp.,  Tokyo- 
based  Fujitsu  Ltd.  and  IBM. 

-  Robert  L  Mitchell 


Nominate  Vour  Vendor  for  Compnteruiorld's  Innovative  Technology  2002  fliuords! 


For  these  special 
awards,  we’re  asking 
IT  customers  - 
Computerworld’s  readers  - 
to  nominate  the  vendors 
they  believe  offer  leading- 
edge  technology  products 
or  services  that  provide 
business  value 
to  customers. 


ABOUT  THE  AWARDS 


Computerworld’s  Innovative  Technology  awards  are  “customer 
choice,”  which  means  Computerworld  is  asking  those  compa¬ 
nies  that  use  technology  (but  don’t  produce  or  sell  it)  to  nomi¬ 
nate  vendors.  The  awards  are  devoted  to  identifying  truly  break¬ 
through  technology  -  from  vendors  with  long  histories  or  those 
new  to  the  industry  -  and  showcasing  how  leading  organizations 
are  using  this  technology  to  achieve  business  payback. 

HON  TO  NOMINATE  VOUR  VENDOR 

From  April  15  to  May  13, 2002,  IT  customers  can  visit 
Computerworld.com  to  nominate  the  vendors  and  technologies 
from  around  the  world  that  they  consider  innovative. 

THE  SURVEV  EVALUATION  ANO  RESULTS 

From  May  20  to  June  17, 2002,  Computerworld  will  survey  those 
vendor  nominees  about  their  technology  applications.  A  panel  of 
outside  experts  and  Computerworld  editors  will  then  review  the  sur¬ 
veys  and  choose  the  winners.  Survey  results  and  stories  that  offer 
practical  advice  from  IT  leaders  using  these  technologies  will  be 
published  in  the  September  23, 2002  issue  of  Computerworld,  as 
well  as  online  at  Computerworld.com.  To  nominate  a  vendor,  please 
go  to  www.computerworld.com/research/innovativetech 


COMPUTERWORLD 

INNOVATIVE 

TECHNOLOGY 


>  2002  AWARDS  <f 

eed  More  Information?  Contact  lnnovativeTech@computerworld.com.  But  hurry!  The  nomination  deadline  is  May  13,  20C 
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No  matter  the  size  of  your  company,  we've  got  a  server  that  fits.  Dell  PowerEdge  servers  with  Windows®  2000  Server  have  many  amazing 
"abilities":  scalability,  availability,  manageability  and  serviceability.  So  they  grow  with  your  business,  minimize  downtime,  are  easy  to  integrate  and 
even  easier  to  support.  No  matter  what  your  business  needs  -  from  file/print  to  database  management  -  you  can  choose  a  PowerEdge”  server  with 
Microsoft®  Windows®  2000  Server  operating  system  that  is  right  for  you.  And,  by  dealing  direct  with  Dell,  you  get  a  system  customized  to  fit  your  business 
needs,  at  an  affordable  price,  backed  by  our  award-winning  service  and  support.  It's  a  nice  mix  of  exactly  the  server  you  need  with  exactly  the  operating  system  you  want. 

Dell  Rated  #1  in  Intel  Server  Satisfaction 

Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 

3rd  Quarter 
-  December  2001 


Ask  about 


0% 

QuickLease 

for  qualified  customer! 


Dell  Small  Business 


PowerEdge™  1500SC  Server 

NEW  Simple  and  Strong  Server 

•  Intel*  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  4GB) 

•  18GB5  (10K  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Gigabit  NIC 

•  1-Yr  Next  Business  Day  On-Site  Service)  1-Yr  Limited  Parts 
Warranty)  1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 


s1299© 


QuickLoan:  $35/mo„  48  mos" 

E-VALUE  Code: 
11071-290412 


Recommended  upgrades: 

•  NEW  PowerConnect"  2124*  24-Port  Unmanaged  Switch 
with  Gigabit  Port,  add  $299 

•  System  Including  Small  Business  Server  2000  and 
Memory  Upgrade  to  256MB  is  S2699 


PowerEdge™  1650  Server 

NEW  Highly  Available  1U  Rack-Optimized  GP  Server 

•  Intel*  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  4GB) 

•  1 8GB'-  (1  OK  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Dual  Embedded  Gigabit  NICs 

•  Hot-Plug,  Redundant  Cooling  Fans 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  Optional  Redundant  Power  Supplies 

•  3-Yr  Next  Business  Day  On-Site  Service3 


$1699 


QuickLoan:  $45/mo„  48  mos!' 

©E-VALUE  Code: 

1 


'11071-290416 


Recommended  upgrade: 

•  System  Including  Windows*  2000  Server  is  $2499 


PowerEdge™  2500  Server 


PowerVault™  PV715N  Storage 


Robust  and  Scalable  Server 

•  Intel*  Pentium*  III  Processor  at  1.13GHz 

•  Dual  Processor  Capable 

•  128MB  133MHz  ECC  SDRAM  (up  to  6GB) 

•  18GB5  (10K  RPM)  Hot-Swap  Ultra3  SCSI  Hard  Drive 

•  Embedded  Dual-Channel  Ultra3  SCSI  Controller 

•  Embedded  Intel*  10/100  NIC 

•  Hot-Plug,  Redundant  Cooling  Fans 

•  Optional  Hot-Plug,  Redundant  Power  Supplies 

•  Optional  Embedded  Dual-Channel  RAID  Solution 

•  3-Yr  Next  Business  Day  On-Site  Service3 


$1899 


QuickLoan:  $50/mo„  48  mos" 

©E-VALUE  Code: 

1 


'11071-290418 


Recommended  upgrades: 

•  PowerConnecf  3024*  24-Port  Managed  Switch,  add  $699 

•  System  Including  Windows1  2000  Server  is  $2699 


NEW  NAS  File  Sharing  Storage 

•  Offloads  Storage  Load  from  Desktops  and  Servers 

•  Snap  Shot  Capability  for  Backing  up  Network  Data 

•  Intel*  Celeron*  Processor  at  900MHz 

•  256MB  SDRAM  (up  to  512MB) 

•  160GB  IDE  Hard  Drive  -  Four  40GB  Bays 

•  Dual  10/100  Ethernet  Ports 

•  SCSI  Port  for  Local  Backup 

•  Multi-Platform  Support  of  PC,  Unix,  Apple,  and  Novell 

•  Powered  by  Windows®  Operating  System 

•  1-Yr  Next  Business  Day  On-Site  Service)  3-Yr  Limited  Parts 
Warranty)  Lifetime  24x7  Dedicated  Server  Phone  Tech  Support 


$1799 


QuickLoan:  $48/mo„  48  mos!1 

©E-VALUE  Code: 

1 


"  11071 -290417n 
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BNSM  1 ' 

Servers  for  any  size  business.  Easy  as  Mm 

Visit  www.dell.com/computerworld  or  call  toll  free  1-800-822-1605. 


Call:  M-F  7a-8p  Sat  8a-5p  CT 

Pricing,  specifications,  availability  and  terms  of  offer  may  change  without  notice  Taxes  and  shipping  charges 
responsible  for  errors  in  typography  or  photography 


Dell  PCs  use  genuine  Microsoft*  Windows" 

extra,  and  vary.  U.S.  Dell  Small  Business  (BSD  and  BASDi  new  purchases  only.  Dell  cannot  be  held  WWW.micrOSOft.COm/pir0Cy/hoWtOtell 


'This  device  has  not  been  approved  by  the  Federal  Communications  Commission  for  use  in  a  residential  environment.  This  device  is  not.  and  may  not  be.  offered  for  sale  or  lease,  or  sold  or  leased  for  use  in  a 

residential  environment  until  the  approval  of  the  FCC  has  been  obtained 


Tot  a  copy  of  our  Guarantees  or  limited  Warranties,  write  Deli  USA  L.P..  Attn:  Warranties.  One  Dell  Way,  Round  Rock.  Texas  78682  'Service  may  be  provided  try  third  party.  Technician  will  be  dispatched,  il 
necessary,  following  phone-based  troubleshooting  To  receive  Next-Business-Day  service.  Dell  must  notify  service  provider  before  5  pm  (depending  on  service  contract)  customer's  time.  Availability  varies  Tor  hard 
drives,  GB  means  1  billion  bytes:  accessible  capacity  varies  with  operating  environment  "Monthly  payment  is  b3sed  on  a  48-month  12.49%  interest  rate  for  qualified  business  customers,  four  interest  rate  and 
monthly  payment  may  be  same  or  higher,  depending  on  your  creditworthiness  OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS  DETERMINED  BY  LENDER.  Taxes,  fees  and  shipping  charger  arc  extra  and 
may  vary  Minimum  transaction  size  of  $500  is  required.  Maximum  aggregate  financed  amounts  not  to  exceed  $25,000.  Not  valid  on  past  orders  or  financing.  QuickLoan  is  from  CIT  Onl  ine  Bank  to  Dell  Small 
Business  (BSD)  customers  with  approved  credit  'QuickLease  arranged  by  Doll  Financial  Services  L  R.  an  independent  entity,  to  qualified  Smail  Business  (BSD  and  SASD)  customers.  0%  leasing  otter  only 
applicable  for  a  24-montlr  fair  Market  Value  l!MV|  Quieklease  and  valid  on  hardware  products  only.  Applicable  taxes,  fees  and  shipping  nor  included  Minimum  transaction  size  of  $500  is  required  At  the  end 
or  the  FMV  Uuicklease  term,  the  Lessee  strait  have  the  following  options:  Purchase  tire  equipment  to'  the  then  FMV,  renew  the  lease  or  return  the  equipment  to  the  Lessor  Please  contact  /our  Dell  Financial 
Services  representative  for  further  details  All  terms  are  subject  to  credit  approval  and  availability  and  are  subject  to  change  without  notice.  Not  valid  on  past  orders  or  leases.  Dell,  the  stylized  E  logo.  E-Value. 
PowerEdge.  PowerConnect  and  PowerVautr  are  trademarks  of  Dell  Computer  Corporation  Intel,  Intel  Inside  and  Pentium  are  trademarks  or  registered  trademarks  ol  Intel  Corporation  or  its  subsidiaries  in  the 
United  States  and  other  countries.  Microsoft  and  Windows  are  registered  trademarks  ot  Microsoft  Corporation.  ©2002  Dell  Computer  Corporation.  All  rights  reserved 
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USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 
with  our  latest  prices.  Enter  the 
E  VALUE  code  online  or  give  it 
to  your  sales  rep  over  the 
phone,  wwwdeil  coni/evalue 
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TECHNOLOGY 


Database  Wipeout  Turns 

Into  Unsolved  Mystery 

In  making  a  hasty  recovery  after  a  SQL  Server  data 
loss,  staffers  may  have  overwritten  critical  evidence 


BY  VINCE  TUESDAY 

ne  night  last  week,  I  was 
rushing  to  get  home  at 
a  decent  time  when  the 
head  of  our  software  sup¬ 
port  team  slipped  me  a 
note  suggesting  that  I  look  into  an  issue 
with  data  loss  on  one  of  our  production 
database  servers.  I  was  tempted  to  just 
leave  it  until  the  next  day,  but  I  decided 
to  investigate  right  away  to  obtain  the 
highest-quality  data  from 
the  fresh  crime  scene. 

I  quickly  discovered  that 
there  was  little  hope  of 
preserving  evidence.  The 
data  had  been  deleted  six 
hours  before  my  arrival. 

During  that  time,  the  sup¬ 
port  team  had  run  a  partial 
investigation,  but  like  any 
support  group,  the  staffers 
had  focused  primarily  on 
diagnosing  the  cause  of 
the  loss  and  restoring  ser¬ 
vice.  While  they  succeeded 
in  restoring  service,  their 
work  had  made  evidence 
preservation  impossible. 

Pieces  of  the  Puzzle 

The  problem  was  that  all  of  the  tables 
within  the  database  had  been  dropped 
and  then  re-created  in  a  10-second  peri¬ 
od.  This  erased  all  of  the  data  in  the  data¬ 
base,  including  financial  data  that  must, 
by  law,  be  kept  for  seven  years.  The 
very  quick  deletion  pointed  to  a  script- 
based  attack  rather  than  a  manual  one. 

The  support  team  had  found  a  prime 
suspect  —  the  install  scripts  for  the 
software  that  uses  the  database.  They 
drop  and  re-create  tables  in  the  same 
order  in  which  they  had  been  deleted. 
But  who  had  run  the  script? 

Our  preferred  response  to  a  possible 
system  compromise  is  to  pull  the  plug 
and  image  the  disk.  After  a  few  weeks 
of  careful  analysis,  we  wipe  the  disks 
and  reinstall.  When  something  goes 
wrong  on  a  production  system,  we 
must  leave  it  running  for  as  long  as  pos¬ 


sible,  until  we  have  compelling  evi¬ 
dence  that  something  awful  is  happen¬ 
ing.  By  waiting  while  we  trample  all 
over  the  crime  scene  with  our  tools,  we 
reduce  the  amount  and  quality  of  the 
evidence  we  collect.  Unfortunately, 
that’s  the  trade-off  we  have  to  make. 

If  we  can’t  stop  the  machine,  our  first 
instinct  is  to  gather  the  ephemeral  digi¬ 
tal  footprints  of  the  intruder.  These 
usually  involve  system  properties  that 
don’t  get  logged  because 
they  change  too  often,  but 
if  we  can  capture  them 
quickly,  they  can  easily 
point  our  investigation  in 
the  right  direction.  Details 
like  TCP  connection  status 
or  recently  opened  docu¬ 
ments  can  tell  us  what  has 
been  happening  on  a  sys¬ 
tem  and  who’s  connected. 

Running  Windows’  Net- 
stat  utility  showed  that  only 
the  investigating  support 
team  was  currently  con¬ 
nected  to  the  machine.  The 
security  log  was  empty.  The 
system  wasn’t  monitored  by 
our  host-based  intrusion- 
detection  system,  as  the  ad¬ 
ministrators  had  felt  the  performance 
overhead  of  logging  would  outweigh 
the  risk  of  any  incident. 

The  system  was  running  in  a  locked 
machine  room,  which  nobody  had  en¬ 
tered,  so  the  closed-circuit  television 
wasn’t  going  to  show  us  who  had 
caused  the  data  loss. 

However,  as  in  many  environments, 
lack  of  physical  access  doesn’t  imply  that 
nobody  can  access  the  machine.  A  re¬ 
view  of  the  enabled  remote  access  meth¬ 
ods  showed  that  Birkerod,  Denmark- 
based  Danware  Data  A/S’s  NetOp  re¬ 
mote  control  software  was  enabled,  as 
were  Microsoft  Corp.’s  Systems  Man¬ 
agement  Server  (SMS)  and  Windows 
NT  Server  4  Terminal  Server  Edition 
connections.  (Our  company  has  tried  to 
define  a  standard  for  remote  access  to 
servers  for  support,  but  each  support 


team  has  a  preferred  method.) 

Just  because  the  formal  security  log¬ 
ging  isn’t  enabled,  however,  doesn’t 
mean  that  a  system  doesn’t  have  evi¬ 
dence  on  its  disks.  This  system  had 
more  than  300KB  of  text  log  files  that 
had  been  updated  since  its  last  reboot 
that  morning. 

The  lost  data  was  still  stored  on  a 
second  machine.  The  backup  had  been 
designed  to  protect  us  from  hardware 
errors,  but  it  helped  with  this  incident 
as  well.  After  ensuring  that  all  the  logs 
had  been  secured,  I  called  it  a  night. 

Incompetence  Produces  Results 

I’m  sure  there  are  high-tech  ways  to 
crunch  such  data,  but  given  the  number 
of  logs  and  the  strange  formats  in¬ 
volved,  I  used  the  low-tech  approach:  I 
printed  it  all  out  and  read  it,  line  by  line. 

The  SMS  log  showed  two  log-ins,  one 
using  SMS  and  another  using  Terminal 
Server,  but  it  had  no  record  of  an  associ¬ 
ated  user  name.  By  looking  for  all 
events  that  had  happened  at  the  same 
time  as  these  log-ins,  I  chanced  upon  a 
useful  error  log  generated  by  our  Patrol 
performance  monitoring  software  from 
Houston-based  BMC  Software  Inc.  This 
log  contained  the  results  of  the  soft¬ 
ware’s  attempts  to  install  desktop  icons 
for  each  user  who  had  connected. 

The  software  had  been  improperly 
installed  under  a  normal  user  account, 
so  it  lacked  privileges  to  access  users’ 
desktops.  Every  time  someone  logged 
in,  it  recorded  a  log  entry  saying  “Patrol 
install  user  DOMAIN\BOB  doesn’t  have 
privileges  to  write  to  user  DOMAIN\ 
FRED  desktop.”  In  so  doing,  it  gave  me 
the  exact  times  and  user  names  for 
everyone  who  had  logged  in.  Patrol  log¬ 
ging  also  highlighted  that  a  third  log-in 
had  occurred  —  this  one  via  NetOp. 

Our  investigation  tracked  down  the 
circumstances  of  the  log-ins:  An  opera¬ 
tor  had  logged  in  overnight  to  do  normal 
quality  assurance;  a  database  adminis¬ 
trator  had  checked  for  performance 
issues  midmorning;  and  the  support 
team  logged  in  eight  minutes  after  the 
incident  to  respond  to  the  errors  that 
the  missing  data  caused. 

Without  a  log-in  at  the  time  of  the 
erasure,  it  looked  like  the  script  might 
have  been  run  remotely  by  SQL  Server. 


SECURITYFIRST-AIDKIT 

After  our  mysterious  database  crash, 
we  issued  a  “first-aid  kit"  to  our  soft¬ 
ware  support  team  as  a  way  to  protect 
evidence  during  future  incidents.  We 
stitched  the  following  components 
together  into  a  single  script  that  the 
staff  can  run: 

www.foundstone.com/knowledge/free_ 
tools.html:  Fport,  free  from  Mission 
Viejo,  Calif.-based  Foundstone  Inc., 
identifies  which  applications  are  listen¬ 
ing  on  which  ports.  Fport  is  a  great  way 
to  uncover  Trojan  horses  installed  on 
your  system. 

www.sysintemals.com/ntw2k/ 
freeware/psloggedon.shtml'.  PS- 
LoggedOn,  an  applet  available  free  from 
Austin,  Texas-based  Syslnternals  LLC, 
provides  a  comprehensive  listing  of 
who’s  logged  on  to  a  Windows  NT 
system  at  a  given  time. 

www.microsoft.com :  Microsoft  in¬ 
cludes  the  Netstat  utility  with  its  Win¬ 
dows  and  .Net  operating  systems.  We 
use  it  to  list  all  ports  and  systems  en¬ 
gaged  in  communication  with  a  Win¬ 
dows  NT  server. 


For  ease  of  central  deployment,  the 
script  had  been  written  to  take  a  host 
name  and  deploy  remotely  onto  that 
node.  Without  a  timely  dump  of  net¬ 
work  connection  information  or  SQL 
logs,  we  had  reached  a  dead  end.  We 
chalked  the  event  up  to  a  mistyped  host 
name  on  an  installer  rather  than  to  ma¬ 
licious  behavior. 

Epilogue 

The  system  administrators  still 
wouldn’t  accept  additional  logging,  but 
we  did  manage  to  train  them  on  incident 
handling  —  how  to  avoid  destroying  ev¬ 
idence  and  when  to  call  us.  We  also  de¬ 
ployed  a  “first-aid”  package  of  programs 
(LoggedOn,  Fport  and  Netstat)  and 
wrapped  them  in  a  script  that  staffers 
can  run  to  notify  security  and  send  us 
data  that  would  otherwise  be  lost. 

We  also  raised  security  awareness  in 
the  support  staff  and  found  a  new  way 
to  track  log-ins,  via  the  the  broken  Pa¬ 
trol  install.  Every  time  broken  systems 
help  me  do  my  job  better,  it  brings  a 
smile  to  my  face.  > 

11  discuss  ^is  week’s  column  and 

WLULK  catch  up  on  the  latest  security 
T  developments  online  at: 

1  A I  www.computerworld.com/q7q2000 


SECURITY 

MANAGER'S 

JOURNAL 


•-As  journal  is  written  by  a  real  security  manager,  “  Vince  Tuesday."  whose  name  and  employer  have  been  disguised  for  obvious  reasons.  Contact  him  at  vince.tuesday@hushmail.com  or  go  to  the  Security  Manager’s  Journal  forum. 
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Programmer  Analyst,  must  have 
Bachelors  in  Science  or  Engi¬ 
neering  &  2  yearsOf  experience 
in  designing  and  developing  net 
enabled  applications  usingjava, 
HTML,  Cold  Fusion,  Java  Script, 
CFML,  ATG  Dynamo  for  c/s; 
design  and  develop  applications 
using  Viasoft,  Star  Tool  for  main¬ 
frame  environment;design  and 
develop  RDBMS  using  Oracle, 
DB2,  JDBC.  etc.  Respond  to  HR 
Manager,  Anthem  Technologies, 
Inc.,  77  West  Elm  Wood  Drive, 
Suite  1 13, Dayton.  OH  45459. 


Programmer  Analysts/Network 
Engineers/Software  Engineers 
(all  multiple  positions)  sought  by 
computer  s/w  consultancy  firm  in 
Yardley,  PA.  Must  have  Bach  in 
Comp  Sci.,  Engg  or  equiv  and 
one  yr  relevant  exp.  Respond 
to:  HR  Dept.,  Global  Systems 
Technologies,  Inc.,  109  Floral 
Vale  Blvd.,  Yardley,  PA  19067. 


Sagarsoft,  Inc  is  seeking  individ¬ 
uals  to  work  at  various  locations 
throughout  the  U.S.  Seeking: 
Software  Engineers,  Programmer 
Analyst,  Quality  Assurance 
Engineers,  DBA's  and  Systems 
Administrator.  Reqs:  B.S,  plus 
experience.  Senior  Software 
Engineers,  Senior  Programmer 
Analyst.  Req:  M.S.  plus  experi¬ 
ence  or  B.S.  plus  5  years  experi¬ 
ence.  We  are  seeking  applicants 
with  the  following  skills:  Sybase, 
Oracle,  C++,  VC++,  Pro  "C, 
FoxPro,  SAS,  business  objects 
among  others.  Apply  to: 
Sagarsoft,  Inc.  78  Eastern  Blvd., 
Glastonbury,  CT  06033 


Softline  Systems  is  seeking 
qualified  Programmer  Analysts, 
Systems  Analysts,  DBAs,  and 
Software  Engineers  for  various 
positions  to  work  at  client  sites 
throughout  the  US.  Applicants 
must  have  a  B.S.  in  Computer 
Science  and  1  yr  relevant  expe¬ 
rience.  Send  resume  to:  Softline 
System,  Attn:  Human  Resources. 
690  Canton  St.  Suite  290, 
Westwood,  MA  02090. 


Computer  Programmer,  Bklyn,  NY 
-  Develop  &  write  programs  to 
store,  locate  &  retrieve  documents, 
data  &  information  for  retail  & 
wholesale  clothing  company. 
Plan  layout  of  new  &  modify 
existing  system,  using  standard 
programming  languages  (dBase, 
COBOL  &  Turbo  C). network 
systems  (LAN/WAN)  &  routers 
(Cisco).  Bachelor's  w/computer 
specialization  or  equivalent.2yrs 
of  related  computer  exp  req'd. 
Send  CV:  4609  1st  Av.  Bklyn, 
NY  11232,  atl:  Albert  Nigri.  Fax 
718-369-7410. 


Software  Engineer  (St.  Louis, 
MO,  multiple  positions):  Design, 
develop,  modify,  implement  and 
maintain  computer  software 
systems  in  Windows  and  Unix 
environment  utilizing  object  ori¬ 
ented  programming  techniques, 
C/C++,  Java,  Visual  Basic,  Oracle, 
SQL,  PL/SQL.  and  GUI  tools 
Require  MS  in  Comp.  Sci., 
Math..  Engr.  or  in  a  related  field 
(or  B.S.  in  the  same  field  with 
minimum  5  years  progressive 
experience  in  offered  or  similar 
positions.)  Competitive  salary; 
40hr./wk.;  Mon-Fri.,  8:00  a.m.- 
5:00  p.m.  Resume  to:  Mr.  K. 
Jasti,  Global  Software  Solutions, 
Inc.,  1001  Craig  Road.,  Suite 
330,  St.  Louis,  MO  63146.  No 
call/EOE 


Computer/Info  Systems 
Coral  Technology  Corporation,  a 
Software  Design  and  Consulting 
firm  seeks  to  fill  the  following 
position  in  Streamwood,  Illinois, 
and  unanticipated  locations  in 
the  US; 

Programmer  Analyst,  Must  have 
BS  &  2  yrs  software  development 
experience. 

Respond  by  resume  to  Coral 
Technology  Corp.,  Michael 
Deluca,  37  W.  Briarwood  Drive, 
Streamwood,  IL  60107. 


Ld.  Programmer/Analyst  wanted 
by  recruitment  org.  in  Melville, 
NY.  Reqd  B.E.  or  equiv  +  3  yrs 
exp  incl.  Oracle,  SQL,  Power¬ 
Builder.  Fax  resume  to  M.  Storelli 
at  (631)  844-7426. 


Technical  Support  Specialist.  8a- 
5p.  40  hrs/wk.  Analyze  project; 
assign  &  coord  work  schedules; 
review,  test  prgm  for  compatibility; 
troubleshoot  &  provide  tech  sup¬ 
port/updates  using  Oracle,  VB. 
JavaScript,  XML,  Perl,  Shell, 
HTML,  C,C++,  UNIX  &  Win  NT. 
Reqmt:  Bach  or  equiv  in  Comp 
Sci/Engg;  Electrical,  Electronics 
or  related  Engg;  Info  Technology, 
Commerce  or  Bus  Admin/Mgmt. 
2  yr  exp  in  job  offd  or  as  Project 
Dvlpmt  Coordinator  or  Resource 
Mgr.  Resume  to:  Concept 
Software  &  Services,  Inc.,  7094 
Peachtree  Indus  Blvd,  #201, 
Norcross,  GA  30071. 


ASSOCIATE  APPLICATIONS 
DEVELOPER  -  40  Hours  Per 
Week,  9:00  a.m.  -  5:00  p.m., 
$39,420  per  year,  Located  in 
Miami  Floirda.  Requires  Bache¬ 
lor's  Degree  in  Management 
Information  Systems-As  part  of 
the  project  team  environment 
will  support  development  and 
implementation  activity  for  medium 
to  complex  Client  Server  appli¬ 
cations.  Will  use  and  adhere  to  a 
Software  Development  Life  Cycle 
process.  Must  have  a  strong 
working  knowledge  of  one  or  more 
of  the  following:  WINDOWS  API, 
Visual  Basic,  Familiarity  with 
SQL  Send  resume  to  Attn: 
CWBC  at  Beckman  Coulter  Inc., 
via  e-mail  at  ehr.staffing® 
coulter.com 


Information  Systems/ 

Systems  Analyst 
Global  Information  Management 
Americas  Inc.,  part  of  Tetra  Pak, 
currently  seeks  an  eBusiness 
Info  Systems  Analyst  to  evaluate 
business  requs  for  s/ware  needs 
&  perform  implementation  & 
provide  support  for  new  tools  & 
s/ware.  Qualified  applicants  must 
have  a  BS  in  Computer  and/or 
Information  Science  &  2  yrs 
exp  in  job  offered  or  as  Systems 
Analyst/Manager.  Must  have  exp 
w/  specialized  s/ware,  imple¬ 
mentation  &  system  design. 
Send  resumes  to  [no  calls 
pis):  Dianne  Trillo,  Employment 
Services  Coordinator,  Tetra 
Pak  Inc.,  101  Corporate  Woods 
Pkwy,  Vernon  Hills,  III  60061 .  Pis 
ref:  DT/ISA.  (Please  note  that 
interviews  will  be  held  at  company 
site  in  Denton,  TX). 


QA  Analyst,  wanted  by  IT  com¬ 
pany  in  Ohio.  Must  have  Bachelors 
Degree  in  Engineering  or  Science 
besides  two  years  of  experience 
in  analyzing  and  performing 
software  quality  assurance  of 
applications  using  SQA  Suite, 
Winner,  Load  Runner,  Test 
Director  and  Silk  Tools  for  Unix, 
Sun-Solaris,  and  Windows  95/98/ 
2000/NT  environment;  analyze 
user  requirements  and  implement 
test  procedures;  writing  test 
Scripts  and  performing  QA  with 
different  test  cases;  User  Interface, 
Regression,  Back-end,  Database 
testing  and  Documenting  Errors; 
Communicate  and  create  peri¬ 
odical  status  reports;  Perform 
queries  to  check  the  Database; 
performed  QA  for  compatibility  of 
various  browsers. 

Respond  to  Anthem  Technologies, 
Inc.,  77  West  Elm  Wood  Drive, 
Suite  1 13, Dayton,  OH  45459. 


Senior  Software  Engineer  wanted 
in  Houston,  TX.  Research,  design 
and  writes  computer  software, 
applying  techniques  of  software 
engineering  and  mathematical 
analysis.  Designs  Data  Models, 
Process  Models,  and  Object 
Models.  Designs  database  ap¬ 
plications  using  Powerbuilder, 
Oracle,  and  Sybase.  Requires  a 
Masters  degree  in  Computer 
Science  or  Computer  Engineer¬ 
ing  and  3  years  progressive 
experience.  Send  resumes  to: 
HR  Dept.,  Codon  Group  Inc., 
9894  Bissonnet,  Ste.  445, 
Houston,  TX  77036. 


PROGRAMMER  sought  by  e- 
commerce  provider  in  Houston, 
TX.  Respond  by  resume  to:  D/S, 
Y/H,  Director  of  Technology, 
ChanneLinx,  Inc.,  3910  Kirby  Dr., 
Suite  201 ,  Houston,  TX  77098. 


Actuarial  Programmer 
with  pension  applications 
experience  for  Senior 
Consultant  position  in 
Teaneck,  N.J.  E-mail 
resumes  to:  resumes- 
JXP  @  buckconsultants. 

com. 


National  Instruments  Corp  is  a 
fast  growing  Hi-tech  Co  based  in 
Austin,  TX  and  is  currently  seek¬ 
ing  to  fill  multiple  positions  in  the 
following: 

Software  Engineers 
Research,  dsgn  &  dvlp  s/ware  in 
mainly  C/C++  using  OO  dsgn  & 
s/ware  dsgn  principles.  Must 
have  Bachelors  in  Engg,  or 
Comp  Sci  or  Physics  or  Math. 
CODE:  ZSW 
Applications  Engineers 
Develop  applications  for  prod¬ 
ucts,  systems  and  new  business 
opportunities.  Provide  technical 
support  for  software  products 
and  their  applications  to  cus¬ 
tomers,  sales  engineers,  and 
distributors.  Resolve  technical 
issues  using  an  understanding 
of  electronics  and  software  pro¬ 
gramming  fundamentals.  Must 
have  Bachelor's  in  Engineering 
or  Computer  Science,  or  Physics 
or  Math.  CODE:  ZAE 
Computer  Hardware  Design 
Engineers 

Research,  dvlp  &  manage  pro¬ 
jects  in  data  acquisition,  signal 
conditioning,  industrial  commu¬ 
nication,  instrument  Ctrl,  image 
acquisition,  embedded  con¬ 
trollers  &  ASIC  prdcts  using  dsgn 
techniques  in  analog  &  digital 
circuit  dsgn,  comp  architecture, 
communication  bus  interfacing  & 
digital  signal  processing.  Must 
have  Bachelors  in  Engg,  Comp 
Sci,  or  Physics  or  Math.  CODE: 
ZHE 

Programmer/Analysts  (Business 
Processes) 

Plan,  analyze,  dsgn,  dvlp  &  test 
s/ware  using  Oracle,  Lotus  Notes, 
Web;  use  GUI  &  object-oriented 
dsgn  to  dvlp  user  interfaces  & 
data  entry  screens  that  support 
business  functions.  Bach  in  Info 
Sys  or  Comp  Sci  or  Business 
Admin.  CODE:  ZPA 
Staff  Programmer/Analysts 
Evaluating  applications  develop¬ 
ment  projects,  leading  a  team  of 
Programmer  analysts/interns; 
planning,  analyzing,  dsgng, 
dvlpng  &  testing  s/ware  using 
Oracle  &  Lotus  Notes;  using  GUI 
&  object-oriented  dsgn  to  dvlp 
user  interfaces  &  data  entry 
screens.  Bach,  needed  and  2 
years  as  Programmer/Analyst. 
CODE:  SPA 

Fax  resumes  to:  Raja  Faris, 
National  Instruments  Corp  at 
512-683-6924.  Job  Code  must 
appear  on  resume. 


Computer  Professionals  w/exp 
to  install,  program,  analyze, 
design,  develop  &  test  scripting, 
data  conversion,  end-to-end 
testing,  testplan,  testing  Life 
Cycle  &  Bug  Life  Cycle  in  auto¬ 
mated  test  environment  of  web 
&  client  server  applications  using 
WinRunner,  Automation  tool, 
performance  testing  using  Load- 
Runner,  Test  Director,  SQL 
Server  &  Oracle.  Send  resume 
to:  Recruiter  GITS,  LLC,  7067 
East  Chestnut  Hill  St,  Littleton, 
CO  80130.  Email:  recruiter 
@  alobalinfotechservices.net  No 
in-person  resumes/interviews, 
only  respond  by  mail  or  email. 


Dublin  Manufacturing  Co.  seeking 
F/T  expd.  Manager  of  Product 
Support  to  research,  design,  and 
developing  of  computer  software 
systems,  in  conjunction  with 
hardware  product  development. 
Analyze  software  requirements 
to  determine  feasibility  of  design 
within  time  and  cost  constraints. 
Consult  with  hardware  engineers 
and  other  engineering  staff 
to  evaluate  interface  between 
hardware  and  software,  and 
operational  and  performance 
requirements  of  overall  system. 
Formulate  and  design  software 
system,  using  scientific  analysis 
and  mathematical  models  to 
predict  and  measure  outcome 
and  consequences  of  design. 
Bachelor's  degree  in  Computer 
Science,  competitive  salary.  Fax 
resume  to  Alison  (561 )  995-6027. 


divine. inc.  computer  software 
applications  developers  and 
consultants,  are  seeking  quali¬ 
fied  applicants  for  the  following 
positions:  Systems  Engineer, 
Senior  Application  Integration 
Engineer,  Staff  Software  Engi¬ 
neer,  Senior  Software  Engineer, 
Senior  Engineer,  Software  Engi¬ 
neer,  Engineer,  Sr.  Technical 
Training  Specialist,  Sr.  Consul¬ 
tant,  Consultant,  Director  of 
Development  and  Integrations, 
Development  Director,  Loader/ 
Development  Team  Lead,  UNIX 
System  Administrator,  Gateway 
Developer  and  Director.  Openings 
are  available  at  the  following 
locations:  Fairfield,  CT..  St.  Louis, 
MO,  Burlington,  MA,  Chicago, 
IL.,  Denver,  CO.,  Norcross, 
GA,  Columbus,  OH.,  and  Santa 
Monica,  CA.  Interested  appli¬ 
cants  should  forward  their 
resumes:  divine, inc.,  Attn:  DK 
1;3333  Warrenville  Rd.,  Lisle, 
IL,  60532  or  by  fax  addressed  to 
DK  1  at:  630-799-0060.  EOE 


SOFTWARE  ENGINEER  to  pro¬ 
vide  on  site  consulting  to 
perform  object  oriented  design 
for  client/server  and  internet 
industrial  software  applications 
using  C/C++,  J2EE,  JavaScript. 
VBScript,  HTML,  Java,  XML, 
XSL,  WebLogic,  Oracle,  Rogue- 
wave,  CORBA  in  UNIX/Windows 
and  Rational  Rose/Together 
J  and  web  reports.  Require:  M.S. 
in  Electronics  Engineering/Com¬ 
puter  Science  and  two  years 
experience  in  the  job  offered  or 
any  experience  providing  skills 
in  described  duties.  40%travel 
required  to  client  sites  within  the 
United  States.  Salary:  $72,000 
per  year,  8  am  to  5  pm,  M-F.  Apply 
with  resume  to:  President, 
ObjectNet  Technologies,  Inc., 
1117  Perimeter  Center  West, 
Suite  N402,  Atlanta,  GA  30338. 


SYSTEMS  ANALYST:  Respon¬ 
sible  for  systems  development 
&  production  support.  Work 
experience  in  the  following  Infor¬ 
mation  Technologies:  Mainframe 
Based  Applications,  Altamira 
Banking  Software,  CICS,  MVS, 
TSO,  ISPF,  DB2,  PACE,  COBOL, 
RPG400,  SAFE,  JCL,  VSAM 
organization,  analysis,  design 
&  structured  programming 
methodology.  All  modules  of 
Abanks  front  desk  System  and 
SIMM  Information  Banking  sys¬ 
tem.  Experience  redesigning  & 
programming  General  Ledger 
applications  from  Mainframe  to 
AS/400  using  CoboMOO  and 
RPG400.  Ability  to  work  on  all 
phases  of  application  develop¬ 
ment  from  gathering  &  analyzing 
user  requests  up  to  deploy  in 
production. Min.  4  yrs  exp.  in  job 
offered.  Competitive  salary,  F/T, 
Mon-Fri  (may  require  evening 
&  weekends),  must  be  willing 
to  travel  &  relocated  as  neces¬ 
sary,  position  available  in  Ft. 
Lauderdale,  FL.  Monica  de  los 
Riosat  Softtek:  2900  University 
Drive,  Coral  Springs,  FL  33065 


DIRECTOR  OFTECHNOLOGY- 
Interior  Construction  Company 
seeks  Director  of  Technology 
with  the  following  responsibilities. 
Oversee  a  network  of  100  work¬ 
stations,  15  servers  &  a  tech, 
staff  of  2  programmer  analysts  & 
5  network  technicians;  design  & 
build  construction  information 
system  &  integrate  w/existing 
legacy  accounting  system; 
integrate  existing  construction 
technology  with  AIA  standard 
processes  to  streamline  the 
work  processes.  Successful 
candidate  will  have  a  Bachelor's 
degree  in  Computer  Science  or 
Civil  Engineering,  &  1  y  exp.  in 
job  duties  or  1  yr.  exp.  as  Civil 
Engineer.  Experience  in  DB 
programming,  Drywall  technolo¬ 
gies  &  processes  &  NT  networks 
a  must.  Mail  resume  to  Component 
Assembly  Systems,  620  Fifth 
Ave.,  Pelham,  NY  10803,  Attn: 
John  Rapaport. 
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Senior  Mechanical  CAD  Integra¬ 
tion  Software  Development 
Engineer  to  design,  program, 
document,  and  test  interfaces 
for  third  party  mechanical 
Computer  Aided  Design  ("CAD") 
engineering  design  systems  in¬ 
cluding  Pro/Engineer,  Solid- 
works,  and  AutoCAD  on  Unix 
and  Windows  NT  operating  sys¬ 
tems.  Analyze  existing  legacy 
database  management  and  file 
processing  systems  for  electron¬ 
ic  mechanical  CAD  engineering 
document  storage  and  control, 
and  provide  design  and  feasibil¬ 
ity  analysis  for  enhancing  and 
upgrading  systems  utilizing  C++ 
programming  language  and  oth¬ 
er  software  development  tools. 
Analyze  and  propose  changes  to 
mechanical  CAD  software  inte¬ 
grations  to  improve  overall  sys¬ 
tem  reliability  and  throughput. 
Review  software  developed  to 
ensure  compliance  with  func¬ 
tional  and  technical  specifica¬ 
tions.  Create  and  maintain  unit 
level  automation  regression  test 
systems  for  software  code  de¬ 
veloped.  Develop  and  implement 
software  test  plans,  prepare  test 
standards  and  procedures  for 
performing  mechanical  and  au¬ 
tomated  test  programs.  Perform 
analysis  and  document  test 
results  for  mechanical  CAD 
integrations  and  other  general 
integration  tools.  Provide  techni¬ 
cal  guidance  and  support  on 
mechanical  CAD  design  engi¬ 
neering  to  software  developers 
and  quality  assurance  engineers. 
Requirements:  Master  Degree  in 
Mechanical  Engineering  and 
one  (1)  year  experience  in  job 
offered  or  one  (1 )  year  experience 
in  mechanical  engineering  re¬ 
search  and  development.  Candi¬ 
date  must  also  possess  demon¬ 
strated  expertise  designing 
mechanical  systems  using  Pro/ 
Engineer,  Solidworks,  and  Auto¬ 
CAD;  demonstrated  expertise 
utilizing  mechanical  design 
•systems  running  on  Unix  and 
Windows  NT  operating  systems; 
and,  demonstrated  expertise 
utilizing  mechanical  design 
systems  to  write  software  inter¬ 
faces  using  C++  programming 
language  (experience  gained 
during  graduate  studies  accept¬ 
able).  40+  hours/week,  8:00AM 
to  5:00PM,  $85, 000/year.  Submit 
two  (2)  copies  of  resume  to  Case 
#20012162,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
floor,  Boston,  MA  02114.  Must 
have  proof  of  legal  authority  to 
work  permanently  in  the  U.S. 


Wild  Tangent,  Inc.  seeks  Sr.  S/W 
Engnr  for  Bellevue  Office.  DESC: 
Dsgn,  dev  &  impl  compressed  & 
streaming  RT  digital  video  &  3D 
multimedia  computer  graphics 
&  animation  app's  util  C/C++, 
DirectX,  COM,  Java  &  scripting 
languages  to  run  on  multiple 
platforms,  incl  Win  based  O/S. 
Execute  &  apply  current  rsrch 
math  models  for  compression, 
image  processing  &  3D  graphics. 
REQ:  BS  in  Engnr,  CS,  Math 
or  Phys  +  3  yrs  of  exp  dsgning, 
deving  &  impling  RT  computer 
graphics  &  animation  app's  util 
C/C++,  DirectX,  COM,  &  scripting 
languages  to  run  on  Win  based 
O/S,  &  1  yr  of  exp  dsgning  & 
deving  math  models  for  com¬ 
pression,  image  processing, 
digital  video  &  3D  graphics.  Pis 
send  resume  to  WT-101  Wild 
Tangent,  18578  NE  67th  Ct; 
Build  5,  Redmond  E.  Office 
Complex,  Bellevue,  WA,  98052. 
Job#  required. 


World  Wide  Automotive,  Inc.  is 
looking  for  exp.  Sr.  Business 
Analyst  Programmer.  Strategic 
design,  development  &  imple¬ 
mentation  of  financial  systems 
for  automation  of  business 
processes  using  MFG/PRO. 
70%  travel.  Req.  Bach.  deg.  in 
Business  Admin.,  Comp.  Sci.  or 
rel.  field,  3  yrs.  exp.  in  job  offered 
or  3  yrs  exp.  in  developing 
bus  proc.  automation  s/w  in 
MFG/PRO  Please  send  resume 
to:  v.ww.wwa  recruiting.com. 


Senior  Mechanical  CAD  Integra¬ 
tion  Quality  Assurance  Engineer 
to  perform  tests  for  integrations 
of  third  party  mechanical  CAD 
engineering  systems  including 
Pro/Engineer,  Solidworks,  and 
AutoCAD  on  Unix  and  Windows 
NT  operating  systems.  Analyze 
related  documentation,  software 
designs,  and  software  code.  An¬ 
alyze  existing  legacy  database 
management  and  file  processing 
systems  developed  using  C++ 
for  electronic  mechanical  CAD 
engineering  document  storage 
and  control,  and  provide  recom¬ 
mendations  for  improvement 
particularly  those  to  support 
mechanical  CAD  integrations. 
Develop  and  implement  software 
test  plans,  prepare  test  stan¬ 
dards  and  procedures  for  per¬ 
forming  mechanical  and  auto¬ 
mated  test  programs,  and 
perform  analysis  and  document 
test  results  for  mechanical  CAD 
integrations  and  other  general 
integration  tools.  Analyze  and 
propose  modifications  to  me¬ 
chanical  CAD  software  integra¬ 
tions  to  improve  overall  system 
reliability  and  throughput.  Review 
software  developed  to  ensure 
compliance  with  functional  and 
technical  specifications.  Create 
and  maintain  unit  level  automation 
regression  test  systems  for  soft¬ 
ware  code  developed.  Provide 
technical  support  and  guidance 
on  mechanical  CAD  design 
engineering  to  software  devel¬ 
opers  and  quality  assurance 
engineers.  Requirements:  Master 
Degree  in  Mechanical  Engineer¬ 
ing  and  two  (2)  years  experience 
in  job  offered  or  two  (2)  years 
experience  in  mechanical  engi¬ 
neering  research  and  develop¬ 
ment.  Candidate  must  also  pos¬ 
sess  demonstrated  expertise 
designing  mechanical  systems 
using  Pro/Engineer  and  Solid- 
works;  demonstrated  expertise 
utilizing  mechanical  design 
systems  running  on  Unix  and 
Windows  NT  operating  systems; 
and,  demonstrated  expertise 
utilizing  mechanical  design 
systems  developed  using  C++ 
programming  language  (experi¬ 
ence  gained  during  graduate 
school  acceptable).  40+  hours/ 
week,  8:00AM  to  5:00PM, 
$75, 000/year.  Submit  two  (2) 
copies  of  resume  to  Case 
#20012083,  Labor  Exchange 
Office.  19  Staniford  Street,  1st 
floor,  Boston,  MA  02114.  Must 
have  proof  of  legal  authority  to 
work  permanently  in  the  U.S. 


Net/Programmer/Analyst  II 

Provide  functional  and  technical 
expertise  for  enhancements  and 
for  maintenance  of  existing  func¬ 
tionality  of  the  NET/Leshner 
applications,  including  design, 
development  of  programs  spec¬ 
ifications,  code  writing,  testing 
and  implementation.  Develop 
function  and  program  specifica¬ 
tions,  write  RPG  code,  test, 
implement  support,  and  main¬ 
tain  applications  enhancements. 
Assess  requirements  and  translate 
them  into  code.  Candidates  must 
have  a  Master's  or  equivalent 
in  Computer  Science,  MIS,  En¬ 
gineering,  or  related  field  &  3  yrs 
of  relevant  progressive  profes¬ 
sional  experience  in  the  above 
stated  areas.  Please  forward 
resume  to  Mr.  Onyeka  N.  Nchege, 
Director  of  Mid  Range  Applica¬ 
tions,  Pillowtex  Corporation,  One 
Lake  Circle  Dr.  Kannapolis,  NC 
28081 . 


Programmer/Analyst,  Columbia, 
MD.  Analyze,  design,  implement 
&  test  e-business  applications 
&  project  full  life  cycle;  develop 
engine  track  protal  using  content 
management  software  tools  & 
develop  web-based  solutions  for 
warranty  groups.  Work  w/Java 
technology.  Oracle,  VB.  Apache. 
Rational  Rose,  scripting  Td, 
HTML,  &  SQL  Server.  Reqd: 
B.S.C.S.  &  2  yrs.  exp.  Freq.  Reloc. 
within  U.S.  may  be  necessary. 
M-F,  40  hrs/wk,  9am-5pm.  Send 
resume  to  J.  Brigham,  HR  #777, 
TEK  Systems.  6992  Columbia 
Gateway  Drive,  Columbia,  MD 
21046. 


COMPUTER  PROFESSIONALS 
Opportunities  for: 

•  WEB  ARCHITECTS/ 
DEVELOPERS 

•  SYSTEMS  ANALYSTS 
•WEB  GRAPHIC  DESIGNERS 

•  NETWORK  ENGINEERS 

•  PROGRAMMER/ANALYSTS 

•  SOFTWARE  ENGINEERS 

SKILLS: 

•  COLD  FUSION  •  SPECTRA 

•  ORACLE  •  VISUAL  BASIC 

•  VISUAL  C++  •  SIEBEL  •  ASP 

•  COM,  DCOM  •  JSP  •  HTML 

•  JAVA,  JAVA  BEAN  •  EJB  JAVA 
SERVLETS  •  WEBSPHERE 

•  IBM  MQ  SERIES  •  XML,  UML 

•  MTS  •  CLARIFY  •  PERL 
•OBJECTPERL  •  SPYPERL 

•  SMALLTALK  •  PL/SQL 

•  VISUAL  AGE  •  COBOL,  SPL, 
UNIX 

Visit  our  website  @ 
www.computerhorizons.com 

Attractive  salaries  and  benefits. 
Please  forward  your  resume  to: 
H  R.  Mgr.,  Computer  Horizons 
Corp.  49  Old  Bloomfield  Avenue, 
Mountain  Lakes,  New  Jersey 
07046-1495.  Call  973-299-4000. 
E-mail:  jobs  @  computerhorizons. 
com.  An  Equal  Opportunity  Em¬ 
ployer  M/F. 


Multiple  openings  available  for 
Prog/Sys  Analysts,  DBA's, 
Sys/Admin  and  S/W  Engineers 
to  design/develop  S/W  appls 
using  some  of  the  following  - 
Cobol,  CICS,  DB2;  Java,  Power¬ 
Builder,  HTML,  XML;  data 
warehousing,  cognos;  wireless/ 
web  technologies;  C++,  VB, 
Oracle,  Developer  2000,  SAP, 
ABAP/4;  Oracle/Sybase/Informix 
database  admin;  Unix/NT  system 
admin;  IBM  Net. Commerce, 
MQSeries.  Websphere;  BS/MS 
or  equivalent  in  CS,  Engg, 
Science,  Math  or  Bus  Admin 
required.  Salary:  $70-90K  full 
time.  Travel/relocation  involved. 
Resumes  to:  HR,  Smartsoft 
International  4898  South  Old 
Peachtree  Road,  Suite  200, 
Norcross,  GA  30071 . 


Software  Engineer  Washington, 


DC  Require  experience  in  design 


and  development  of  applications 


in  ColdFusion,  SQL  Server, 


Visual  Basic,  C++,  Oracle. 


Attractive  compensation  package. 


Send  resume  by  fax  only  to 


Votenet  Solutions  Inc.  at  (775) 


201-7279 


Systems  Engineer  wanted  by 
info  technology  co  in  NYC. 
Provide  tech  support;  install  and 
maint  client  systems  and 
netwrks.  Sun  Solaris,  Veritas 
products,  Oracle,  PUSQL.  Unix. 
Resume  to  Enterprise  24x7  Inc., 
292  Fifth  Ave,  4th  FI,  NY, 
NY  10001. 


Systems  Engineer:  Will  perform 
LIM  measurements  &  automatic 
macro  defect  detection  on  com¬ 
pany  microchip  wafer  inspection 
system  and  sorters.  Will  work 
at  client  sites  throughout  US.  All 
resumes  should  be  faxed  to: 
Attn:  L.  Guidone,  203-230-0305, 
Microtronic,  Inc.  4  Charlesgate 
East,  Ste.  801,  Boston,  MA 
02215 


BrightStar  is  searching  for 
SAP  Analysts/Consultants 
for  Siebel,  Basis,  Sales, 
Distribution,  HR,  or  Payroll 
projects.  Send  resumes  to: 
BrightStar,  4900  Hopyard  Rd., 
Suite  200,  Pleasanton,  CA 
94588,  Attn:  HR;  or  e-mail  to 
jobs@brightstar.com. 


DATA  PROCESSING  &  TELE¬ 
COMMUNICATIONS  PROF: 
Including  Project  Leaders,  A/P 
&  Systems  Analysts  specficially 
w/SAP,  JAVA,  CDMA,  GSM 
wireless  telecommunications  exp. 
to  work  in  consulting  environment. 
Fax  to  81 8  502  3311  or  email  to 
losangeles  @  abraxas.com 


Senior  Software  Engineer  wanted 
in  Naples,  FL.  Research,  design 
and  write  computer  software 
for  business  decision  support 
applying  techniques  of  software 
engineering  and  mathematical 
analysis  for  SAP  Systems.  De¬ 
signs  Data  Models  and  develops 
data  warehouses,  database 
applications  using  SAP  R/3  and 
BW.  Requires  Masters  degree  in 
Computer  Science/Computer 
Engineering  or  related  field  and 
3  years  progressive  experience 
in  SAP  Business  Warehouse. 
Send  resumes  to:  HR  Dept., 
Timaska  Consulting,  215  Sunbelt 
Circle,  Sanford,  FL  32771. 


Programer/Analyst:  Design  and 
develop  database  applications 
using  ERWIN,  SQL/PL/SQL, 
PeopleSoft  HRMS  and  financials 
as  well  as  Oracle  tools  (forms, 
reports  and  graphics).  Test 
applications  for  quality  assurance. 
Implement  and  train  users 
with  new  products.  Req.  BS  or 
equivalent  in  CS  or  CIS  w/  nine 
months  experience  in  job  offered 
or  software  development.  Must 
be  proficient  in  Crystal  Reports 
and  OOA&D  on  Unix.  $50,000/ 
yr.  9-5,  40  hr/wk.  Send  resume 
to  Softedge,  Inc  at  4675  N 
Shallowford  Road,  Suite  206, 
Atlanta.  GA  30338. 


Director  of  MIS  &  Technology 
wanted  to  perform  enterprise¬ 
wide  technology  &  info  systms 
implmtn  using  ERP  tools,  plus 
utilize  general  bus  knowl  in  vari¬ 
ous  areas.  Pos  is  loc  in  Houston, 
TX.  Hrs:  M-F  9-5.  Must  have  BS 
(or  equiv)  in  Comp  Sci.  Engg 
or  related  field  +5  yrs  exp  in 
position  offd.  or  in  related  occu¬ 
pation  such  as  S/ware  Consultant 
or  Project  Engr  for  info  systms 
dvlpmt  &  implmtn.  Apply  to:  Attn: 
Jackie  Meredith-Batchelor,  P.O. 
Box  8018,  Philadelphia,  PA 
19101-8018. 


SOFTWARE  ENGINEER  sought 
by  battery  testing  mfg.  co.  in 
College  Station,  TX.  Must  have 
M.S.  in  Computer  Science  plus 
exp.  Respond  by  resume  to:  Mr.  J. 
Zhang,  S/W.  Multi  Electrochem 
Test  System  (METS),  762  Peach 
Creek  Cut  Off  Rd.,  College 
Station,  TX  77845. 


Software  Engineers  -  Job#1) 
Lead  a  s/ware  development  grp- 
Intergrate  ORACLE  applications 
using  web  methods,  XML,  J2EE, 
CGI,  PERL.  Sen/lets,  MQ  Series, 
Pivotal  eRelationship  CRM. 
Job#  2)  Desgn,  dvlp,  implmt  & 
tech  support  s/ware  systems  in 
ADABAS.NATURAL.TSO.COB 
OL,  DB2. 

Reqs  2  yrs  experience  on  job 
with  a  MS  or  5  Yrs  on  Job  with  a 
BS  in  Engg  or  equivalent.$89K 
To:  Shiva  Systems  635  Anderson 
Cir  109  Deerfield  Beach  FL 
33441 


Computer  Programmer 

Quantum  Performance  Solutions 
seeks  a  Computer  Programmer 
in  our  Bethlehem,  PA  loc.  Position 
involves  designing,  developing, 
writing  and  implementing  Web 
based  applications,  involves  use 
of  technologies  including  ASP, 
Java  Script,  HTML,  IIS.  SQL 
Server  and  Admin,  Active 
Reports,  Crystal  Reports/Web. 
Robo  Help/Web,  ChartFX  Web 
Charting,  and  Web  Server  Admin. 
A  qualified  applicant  must  have 
Bachelor's  in  Comp.  Sci  or  related 
field  and  3  yrs  of  relevant  expe¬ 
rience.  Applicants  send  resume 
to  HR.  Quantum  Performance 
Solutions,  528  North  New  Street, 
Bethlehem,  PA  18018. 


F/T  Project  Implementation 
Specialist.  Responsible  for 
working  with  the  customer  to 
analyze  and  document  data 
processing  requirements  and 
implement  data  programming  for 
processing  those  requirements. 
Configures  and  installs  applica¬ 
tions  using  C/C++,  COBOL, 
UNIX  and  Windows.  Work  back¬ 
ground  must  have  included  exp. 
with  the  US  telephone  billing/ 
mediation  industry.  Must  have  a 
Bachelor's  degree  in  Computer 
Engineering  or  foreign  degree 
equivalent.  Must  have  two  years 
exp.  Salary:  Competitive.  Send 
resume  to:  R.  Laudenschlager, 
Intec  Telecom  Systems,  5775 
Peachtree  Dunwoody  Rd.,  Bldg. 
G.  3rd  FI..  Atlanta,  GA  30342. 


A  new  millenium,  a  new  solution.  ITcareers. 
Call  Janis  Crowley  at  1-800-762-2977  W  IDG 
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Computer  analyst,  40  hours  per 
week,  8:00  a  m.  to  5:00  p.m., 
$22.08  per  hour.  Duties  include 
design  and  development  of  soft¬ 
ware  for  medical  applications, 
maintenance  and  administration 
of  databases  on  medical  appli¬ 
cations  with  Sybase  SQL  Server, 
visual  basic,  power  builder, 
windows  NT/98,  interactive  SQL 
and  T-SQL.  Applicant  must  have 
completed  three  (3)  semesters 
of  computer  programming,  must 
have  certificate  of  completion  in 
Oracle,  developer  2000,  Sybase, 
powerbuilder,  and  visual  basic. 
Two  (2)  years  prior  experience 
in  computer  programming  or 
computer  analyst  is  also  required. 
“Employer  paid  ad".  Send  resume 
to  MDCD/ESA,  P.O.  Box  11170, 
Detroit,  Michigan  48202.  Refer¬ 
ence  No.  201680. 


Talent  is 
the  fuel  of 
the  new 
economy. 

Fill  up 
with 

ITcareers. 

ITcareers  and 
IT  careers.com 
can  put  your 
message  in  front 
of  2/3  of  all  US 
IT  professionals. 
If  you  want  to 
make  hires, 
make  your  way 
into  our  pages. 
Call  Janis 
Crowley  at 
1-800-762-2977 


ITcareers 

where  the  best 
get  better 


IT  CAREERS 


Programmer  Analyst  (multiple 
openings):  Develop,  create  and 
modify  computer  systems  and 
applications  software  and  spe¬ 
cialized  utility  programs.  Analyze 
and  design  databases  within  an 
applications  area.  Analyze  user 
needs  and  develop  software 
solutions  using  Enterprise 
Resource  Planning  (ERP)  and 
related  software.  Work  involves 
extensive  travel  and  frequent 
relocation.  Must  have  one  year 
of  experience  as  a  computer 
professional  and  one  year  of 
experience  using  1  of  A  as 
follows:  A)  SAP,  BAAN,  Peoplesoft, 
JD  Edwards,  Oracle  Applica¬ 
tions/Financials,  Manufacturing/ 
HR .  Will  accept  Associates  Degree 
or  foreign  equivalent  in  one  of 
several  limited  fields:  computer 
science/applications,  engineering, 
chemistry,  mathematics,  physics 
or  a  scientific  or  business  related 
field.  Salary  is  $67,000  per/yr,  40 
hrs/wk.,  9:00-5:00  p.m.  Please 
submit  resumes  to:  Manager, 
Armstrong  County  Team  PA 
Careerlink,  1270  North  Water 
Street,  PO  Box  759,  Kittanning, 
PA  16201-0759.  Job  Order  No.: 
WEB  237280 


Senior  Software  Engineers  (mul¬ 
tiple  openings):  Design,  develop 
and  implement  software  systems 
to  determine  feasibility  of  design 
and  directs  software  testing  pro¬ 
cedures,  programming  and 
documentation  using  relational 
data  base  management  systems 
(RDBMS)  Work  involves  exten¬ 
sive  travel  and  frequent  reloca¬ 
tion.  Must  have  six  months  of 
experience  using  1  from  Group 
A  as  follows:  A)  Informix,  Oracle, 
FoxPro,  Sybase,  SQL  Server, 
Progress.  Master's  degree  or 
foreign  equivalent.  Will  accept 
Bachelors  degree  or  foreign 
equivalent  with  at  least  five  years 
of  progressive  experience  as  a 
computer  professional  in  lieu  of 
Masters.  Degree  must  be  in  one 
of  several  limited  fields:  Computer 
Science/Applications,  Engineer¬ 
ing.,  Chem.,  Math,  Physics  or  a 
scientific  or  business  related 
field.  Salary  is  $80,000  per/yr,  40 
hrs/wk.,  9:00-5:00  p.m.  Please 
submit  resumes  to:  Fayette 
County  Team  PA  CareerLink, 
Attn:  JS  Supervisor,  32  Iowa 
Street,  Uniontown,  PA  15401- 
3513.  Please  reference  Job 
Order  No.:  WEB  237285. 


Banking 

MBNA  Technology,  Inc.  is  ac¬ 
cepting  applications  for  several 
Software  Engineering  positions. 

This  position  develops  and 
codes  new  applications;  maintains 
legacy  applications;  resolves 
problems  with  production  appli¬ 
cations  and  monitor  application 
performance;  analyzes  and  eval¬ 
uates  business  requirements 
and  assists  with  project  planning 
and  walkthroughs;  creates  and 
maintains  appropriate  support 
documentation;  and  ensures 
strict  adherence  to  Corporate 
and  departmental  polices  and 
procedures. 

Four-year  college  degree  in 
Computer  Science.  Math,  Engi¬ 
neering  or  equivalent  required. 
Minimum  of  2  years  of  related 
experience  in  maintenance  and 
development  of  software  appli¬ 
cations;  experience  with  Microsoft 
C++,  Visual  Basic.  PowerBuilder, 
or  related  development  applica¬ 
tions  and  tools;  and  experience 
with  Unix  and  NT  operating 
systems  and  application  devel¬ 
opment  software  required. 

Please  forward  your  resume 
and  a  cover  letter,  referencing 
source  code:  YNA032104A,  to: 
Ms.  Sharon  Alexander,  MBNA 
America  Bank,  N.A.,  1 1 00  N.  King 
Street,  Wilmington,  DE  19884- 
2234.  We're  proud  to  be  an 
Equal  Employment  Opportunity/ 
voluntary  Affirmative  Action 
Employer. 


COMPUTER 

RadixOne  is  hiring  all  levels  of 
Software  Engineers,  Programmer/ 
Analysts,  Systems  Analysts  and 
other  IT  professionals.  Will 
be  assigned  to  client  sites 
nationwide.  Send  resumes  to 
RadixOne,  Attn:  HR  Dept,  16885 
W.  Bernardo  Drive,  Suite  255, 
San  Diego,  CA  92127  or  email 
resumes  Q  radixone.com. 


the  place  where  your  fellow  readers 


are  getting  a  jump 


on  even  more  of 


the  world's  best  jobs. 


See  for  yourself. 


Software  Engineer-  Research, 
design,  develop  Application 
Software,  Client  Server  &  Multi- 
media  development  using  ASP 
.Net,  VB.Net,  XML,  Cold  Fusion, 
JavaScript.  VBScript,  SQL  Server 
2000,  Flash  Mx  Action  Script, 
Director  Lingo  Programming, 
Photoshop,  Premiere,  Illustrator, 
3DS  MAX,  Install  Shield,  IIS, 
Windows  2000  Server.  Develop 
and  direct  software  system  testing 
procedures,  programming  Inte¬ 
gration  and  documentation  for 
utility/development/diagnostic 
software  with  hardware  product 
development.  Experience  with 
the  full  software  development  life 
cycle.  Masters  in  Computer 
Science  and  3  years  experience. 
Send  resume  to  Pyramid  Con¬ 
sulting  Inc. Attn:  HR  5335 
Triangle  Parkway,  Suite  510, 
Norcross,  GA  30092. 


SENIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  devel¬ 
op,  test,  implement  and  maintain 
complex  information  software 
systems  for  credit  data  process¬ 
ing  in  a  client/server  environment 
using  object  oriented  program¬ 
ming.  GUI  tools,  Oracle,  MS 
Access.  C,  C++,  VC++,  Pro*C++, 
Visual  Basic,  TCP/IP  socket, 
SMTP,  CORBA,  Shell  Script, 
Perl,  RogueWave  Objects,  PVCS, 
Workshop,  Forte  compiler, 
Makefile  &  Builds.  Multithreading, 
Embedded  SQL,  OCI,  Change 
Management  tools,  Purify,  Java, 
HTML,  XML,  SOAP  and  CGI  under 
UNIX,  Windows  NT/2000  and 
SUN  Solaris  operating  systems. 
Require:  B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  five  years  of  progressively 
responsible  experience  in  the 
job  offered.  Competitive  salary 
offered.  Send  resume  to:  Katherine 
Crew,  Equifax,  Inc.,  1525  Wind¬ 
ward  Concourse,  Alpharetta,  GA 
30005  Attn:  Job  PG. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  test 
and  maintain  web-based  appli¬ 
cation  software  in  a  client/server 
environment  using  C,  Java.  RMI, 
Visual  Basic,  EJB,  Servlets, 
HTML,  XML,  ABAP/4,  Perl,  Java 
Script,  Oracle  and  WebLogic 
under  SUN  Solaris  and  Windows 
operating  systems.  Require:  B.S. 
degree  in  Computer  Science,  an 
Engineering  discipline,  or  a 
closely  related  field  with  two 
years  of  experience  in  the  job 
offered.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Apply 
by  resume  to:  Ravi  Kandimalla, 
President,  Everest  Computers 
Inc.,  900  Old  Roswell  Lakes 
Parkway,  Suite  300,  Roswell,  GA 
30076;  Attn:  Job  MC. 


Programmer  hr.  per  wk  40  9-6pm 
the  position  primarily  involves 
the  writing  of  programs  to  extend 
Proprietary  applications.  A  typical 
project  would  involve  80%  time 
spent  programming  and  2%  time 
spent  in  the  modification  and 
integration  of  existing  systems, 
high  school  education  required 
and  1  year  in  professional  pro¬ 
gramming. 

The  candidate  must  have  1  yr.  of 
experience  in  the  following:  TCL, 
ASP.  SQL,  JavaScript,  MSQL, 
Win  2000,  Vignette.  15$  hr.  9-6 
pm  40  hrs.  per  wk.  Applicants 
must  show  proof  of  legal  authority 
to  work  in  the  US. 

Send  resumes  to : 

Illinois  Department  of 
Employment  Security 
402  South  State  Street  -  7  N. 

Chicago,  II  60605 
Attention  Lydia  Clarke 
Reference  #  V-IL  31967-E 
An  Employer  PAID  AD 
No  Calls-  Send  2  copies  of  both 
Resume  &  Cover  letter 


careers 


Programmer  Analyst 

(IBM  Mainframe)  - 

Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementation, 
integration,  maintenance,  support 
and  conversion  of  large  volume 
online  transaction  processing 
and  batch  application  systems  in 
a  multi-hardware/multi-software 
environment  over  centralized 
database  systems  using  rela¬ 
tional/hierarchical/network 
database  management  systems, 
Third  Generation  Languages 
(3GLs),  Fourth  Generation  Lan¬ 
guages  (4GLs),  CASE  tools  and 
Transaction  Processing  Software. 
Bachelor's  Degree  (or  equivalent) 
in  Computer  Science-Math/En¬ 
gineering/Science/Business- 
Commerce  and  1  yr.  experience 
in  job  offered  or  as  Software  En¬ 
gineer/Systems  Analyst  are  re¬ 
quired.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  1  of  B  and  1  of  C;  or  1 
of  A  and  2  of  B;  or  1  of  A  and  2 
of  C.  A  includes  DB2,  IMS  DB 
and  IDMS  DB;  and  B  includes 
CICS,  IMS  DC,  IDMS  DC, 
ADS/O,  QMF,  VSAM  and  MF- 
Workbench;  and  C  includes 
TELON,  IEF,  ADW,  CSP  and 
APS;  High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,829 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to:  JS  Supervisor, 
Greene  County  Team  PA  Career 
Link,  4  West  High  Street, 
Waynesburg,  PA  15370-1324. 
Refer  to  Job  Order  #  WEB 
237289. 


Xansa 

Working  Together  Across  The 
World 

Xansa  is  a  company  that  trans¬ 
forms  the  business  capability  of 
its  clients  through  harnessing 
our  knowledge  of  selected  in¬ 
dustries  and  business  processes 
with  our  proven  skills  in  applying 
technology.  We  are  one  company 
of  specialist  teams  working  across 
three  key  areas  of  expertise: 
Business  Consulting,  Information 
Technology  and  Outsourcing, 

With  offices  throughout  North 
America,  Xansa  provides  the 
opportunity  to  work  on  some  of 
the  most  challenging  business 
and  IT  assignments  currently 
being  undertaken.  Rapid  growth 
means  we  have  opportunities  for 
talented  individuals  to  play  key 
roles  in  our  Information  Technol¬ 
ogy  services.  We  are  currently 
looking  for  a  number  of  experi¬ 
enced  SAP  professionals  to  play 
key  roles  within  our  organization. 
If  you  want  to  be  part  of  this  suc¬ 
cessful  organization,  and  have 
the  breadth  and  depth  of  busi¬ 
ness  and  technical  skills  these 
positions  require,  than  please 
submit  your  resume  in  the  jobs 
section  at  www.xansa.com. 
Please  see  the  following  open 
positions  listed  on  our  web  site: 

•  Lead  SAP  Consultant 

•  Lead  Technical  SAP  Consultant 

•  Technical  SAP  Consultant 

•  Project  Integration  Manager 

•  Business  Development/Pre- 
Sales/Account  Executive 

Xansa  is  an  Equal  Opportunity 
Employer,  and  has  offices  located 
in  North  America,  Europe,  Asia, 
and  India. 


Softwell  Inc.,  is  hiring  all  levels  of 
software  engineers  ,  Business 
Analyst  and  other  technical 
staff.  Send  resumes  to  'Softwell 


Inc.,  76  cranbrook  rd  #288, 
Cockeysville,  MD  21030'.Job 
location  Cupertino,  CA  and/or 
may  be  placed  at  client  sites 
nationwide. 


INFOTECH  CONSULTING,  INC. 
Computer  Programmers,  Software 
Engineers,  Database  Adminis¬ 
trators,  and  Project  Leads 

A  multi-million  dollar  consulting 
firm  seeks  well-qualified  techni¬ 
cal  professionals  for  analysis, 
design,  development,  imple¬ 
mentation  and  maintenance  of 
software  applications  in  one  or 
more  of  the  following: 

#  Java,  EJB,  Severlets,  JSP,  PL/ 
SQL.  Application  Server,  UNIX 
(Solarix),  HTML  &  JavaScript 

$  C++,  PL/SQL,  Application 
Server 

$  XML  (DOM,  SAP),  Java  & 
C++  Parser 

#  OOPS,  CORBA.  ORDBMS 
Concepts 

#  Oracle  Applications  (Financials) 

#  Actuate  Web  Reporting 

$  ORACLE  database  Developer, 
Designer 

#  PowerBuilder 

#  UNISYS  Mapper/COBOL 
$  IBM  Mainframe 

#  DBA-  Oracle.  DB2.  SQL  server 
Computer  Programmers  should 
have  bachelor's  degree  (or  its 
functional  equivalent)  in  Computer 
Science/quantitative  disciplines 
&  2+yrs  relevant  experience. 
Software  Engineers  should  have 
master's  degree  (or  its  functional 
equivalent)  in  Computer  Science/ 
quantitative  disciplines  &  2+ 
yrs  relevant  experience.  DBAs. 
Project  Leads  should  have  bach¬ 
elor's  or  master's  degrees  (or 
functional  equivalents)  and  2  + 
years  relevant  experience. 
Candidates  must  be  willing  to 
travel  &  relocate.  Send  resume 
to:  Recruitment  CWW,  Infotech 
Consulting,  Inc.,  3461  Market 
St.,  Ste.  303,  Camp  Hill,  PA 
17011;  Fax:  717-731-9857; 
Email:  hsinahQicibsl.com. 
Visit  our  website  at  http:// 
www.icibsl.com. 


SOFTWARE  ENGINEER  to 
design,  develop,  implement  and 
maintain  application  software 
in  a  client/server  environment 
using  Visual  Basic,  ASP,  C/C++ 
and  SQL  Server  on  Windows 
NT  platforms;  Design  and 
develop  collaborative  application 
architectures  for  Lotus  Domino 
applications;  Assist  in  the 
conversion  of  legacy  systems 
to  client/server  system  setup 
using  Visual  Basic.  Require: 
Bachelor's  degree  in  Computer 
Science,  an  Engineering  discipline, 
or  a  closely  related  field  with  five 
years  of  progressively  responsible 
experience  in  the  job  offered 
or  as  a  Programmer/Systems 
Analyst.  Extensive  travel  on 
assignments  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Apply 
by  resume  to:  Jack  Patil,  Presi¬ 
dent.  Americus  Global  Software, 
Inc.,  1900  The  Exchange,  Bldg. 
200,  Atlanta.  GA  30339;  Attn: 
Job  VP. 


XyantTech.,  Inc.,  has  immediate 
multiple  openings  for  exp'd  IT 
Professionals  in  both  their  PA  & 
OK  offices  in  the  following  areas 
(various  skills  combination  reqd.) 
VB,  SQL  Server  6.5/7.0,  FoxBase, 
Sybase  10/11,  Unix,  NT  Server 
4.0,  ITS,  JavaScript,  VB  Script, 
C/C++,  Oracle  7,x/8,  JDK,  JDBC, 
VC++,  APT,  APT-SQL,  ASP  Visual 
Interdev,  IIS,  MTS,  ADO,  DAO, 
OOA/OOD,  SSAD.  MFP,  XML, 
XSL,  SQL  Anywhere,  Visual  Fox 
Pro  5.0,  FoxPro  2.5/5,  COM. 
DCOM,  ATL  COM,  SQL  DMO 
6.5,  MSMQ,  PWS.  VSS,  SAP 
R/3,  ABAP/4,  SQR,  VAX/VMS, 
Method  1 .  Commander  EIS.  Ob¬ 
ject  View,  etc.  Some  positions 
require  MS  or  equiv.  CS,  Engg 
(any).  Math,  Bus.  Admin,  or  rel. 
field  while  others  require  BS  or 
equiv.  as  above.  Pay  matching 
with  exp.  Foreign  educ.  equiv 
&/or  combination  of  educ/exp. 
accepted. Travel/relocation  reqd. 
Resumes  &  salary  expectations 
to  HR,  651  Holiday  Dr.,  Ste. 
300,  Pittsburgh,  PA  15220  or 
1108  Rambling  Oaks  Dr., 
Norman,  OK  73072  or  e-mail 
to  KathywQxyant  .com. 
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NEWS 


Evolution  of  an ‘Open’ Standard 

9/15/99  The  United  Nations  Centre  for  Trade  Facilitation  and  Electronic 
Business  and  the  Organization  for  the  Advancement  of  Structured  Informa¬ 
tion  Standards  form  a  group  to  develop  the  technical  framework  for  a  new  In¬ 
ternet-based  trading  standard  called  ebXML. 

9/5/00  OASIS  announces  plans  to  standardize  electronic  contracts  and 
,  trading  partnerships  using  IBM-submitted  XML  format.  I 

4/27/01  RosettaNet  says  it  will  support  the  ebXML  messaging  spec. 

5/14/01  Version  1.0  of  ebXML  is  ratified  in  Vienna.  t 

8/1/01  The  Open  Travel  Alliance  announces  plans  to  build  a  travel  industry 
e-commerce  framework  around  ebXML.  _ . _ I 

3/28/02  IBM  informs  OASIS  that  it  holds  patent  rights  on  its  trading 
partner  submissions. 

.  ’  ...  ..  \ 


Continued  from  page  1 

ebXML  Patent 

“You  don’t  assume  that  after 
you’ve  created  a  significant 
body  of  work  together  that 
someone’s  going  to  stand  up 
and  say,  ‘Remember  that  part 
we  submitted  to  the  group? 
Well,  we  have  a  patent  on  it, 
and  now  you  may  be  subject  to 
licensing  and  royalty  fees,’  ” 
said  Mike  Kistner,  CIO  at  Best 
Western  International  Inc.  in 
Phoenix.  Kistner  is  also  presi¬ 
dent  of  the  Open  Travel  Al¬ 
liance  in  Alexandria,  Va., 
which  plans  to  standardize  on 
the  ebXML  specifications. 

Contribution  Concerns 

“Hopefully,  we  can  continue 
using  what  we  thought  was  an 
open  standard,”  Kistner  added. 
He  said  he’s  “very  concerned” 
about  IBM’s  patent  stance  and 
intimated  that  it  could  affect 
the  travel  alliance’s  plans  to 
use  the  standard  if  the  matter 
isn’t  resolved. 

Ralph  Berwanger,  ambas¬ 
sador  for  standards  at  Irving, 
Texas-based  e-commerce  net¬ 
work  provider  bTrade  Inc.,  has 
been  involved  in  ebXML  devel¬ 
opment  since  its  inception. 
Berwanger  said  all  participants 
were  told  explicitly  that  sub¬ 
missions  should  be  made  with¬ 
out  encumbrance. 

“We  demanded  that  contri¬ 
butions  would  be  just  that  — 
contributions,”  he  said. 

An  IBM  spokeswoman  last 
week  said  the  company  has  de¬ 
cided  to  offer  TPAML  “at  zero 
cost”  to  OASIS  licensees.  She 
declined  to  explain  IBM’s  ra¬ 
tionale  for  placing  a  claim  on 
the  patents. 

However,  in  an  April  17  post¬ 
ing  on  www.ebxml.org,  Martin 
Sachs,  an  IBM  executive  who 
chaired  the  ebXML  trading 
partners  project  team,  wrote, 
“There  was  an  unfortunate 
snafu  earlier  somewhere  in¬ 
side  IBM.  The  disclosure 
[about  IBM’s  patent  claim]  was 
to  be  made  to  ebXML  in  mid- 


2000  in  conjunction  with  the 
start-up  of  the  [trading 
partner]  team,  but  someone 
dropped  the  ball.” 

While  that  appears  to  quell 


Continued  from  page  1 

Senate 

something  industry  groups 
have  generally  supported.  But 
there’s  a  big  stick  tied  to  that 
carrot.  Under  this  proposal,  in¬ 
dividuals  would  gain  the  right 
to  sue,  or  bring  “private  right 
of  action,”  over  privacy 
breaches,  opening  the  door  to 
class-action  lawsuits.  That 
means  a  leak  of  customer  data 
could  lead  to  a  major  lawsuit. 
It’s  a  scary  prospect  for  some. 

“That  will  impede  the  devel¬ 
opment  and  evolution  of  the 
Web.  It  will  stop  it  in  its 
tracks,”  warned  Kirk  Hearth, 
chief  privacy  officer  at  Colum¬ 
bus,  Ohio-based  Nationwide 
Financial  Services  Inc.  “Basi¬ 
cally,  you  won’t  go  into  the 
business  unless  you  can  devel¬ 
op  an  infrastructure  that’s  per¬ 
fect,  or  as  perfect  as  you  can 
make  it.” 

For  a  company,  a  minor  se¬ 
curity  breach  “can  mushroom 
into  a  class-action  suit  and 
bring  it  to  its  knees,”  said 
Hearth. 

Hollings  has  scheduled  an 
April  25  hearing  on  the  bill, 


immediate  royalty  payment 
concerns,  Jamie  Clark,  chair¬ 
man  of  the  Chicago-based 
American  Bar  Association’s 
Business  Law  Subcommittee 


which  is  expected  to  move 
quickly  to  the  full  Senate  for  a 
vote.  It  has  a  key  Republican 
backer  in  Sen.  Conrad  Burns  of 
Montana. 

Many  industry  groups,  such 
as  the  Direct  Marketing  Asso¬ 
ciation  Inc.  in  New  York  and 
the  Arlington,  Va.-based  Infor¬ 
mation  Technology  Associa¬ 
tion  of  America  (ITAA),  have 
urged  Congress  to  let  busi¬ 
nesses  regulate  themselves. 

Business  Challenges 

The  privacy  rights  sought  in 
the  bill  are  modeled  after  the 
Federal  Trade  Commission’s 
fair  information  practices  of 
notice,  consent,  access,  securi¬ 
ty  and  choice.  But  those  rights 
present  potential  challenges 
for  business. 

For  instance,  the  access  pro¬ 
vision  would  require  compa¬ 
nies  to  develop  the  means  to 
make  personally  identifiable 
information  available  for  the 
consumer’s  review.  The  bill 
also  calls  for  “robust  notice.” 

“How  do  you  [provide  ro¬ 
bust  notice]  on  a  wireless  de¬ 
vice  with  a  really  small 
screen?”  asked  Mark  Unca- 
pher,  vice  president  and  coun¬ 
sel  at  the  ITAA.  On  a  Web  site, 


on  Electronic  Commerce  and  a 
member  of  the  ebXML  joint 
coordinating  committee,  noted 
that  IBM  could  still  pull  its 
submission  at  a  later  date. 

He  also  expressed  concern 
that  competitors  could  be  lim¬ 
ited  in  how  they  implement  the 
standard  in  their  products. 
“The  question  becomes,  How 
do  you  feel  building  around  a 
standard  that’s  been  in  some 
way  branded?”  said  Clark. 

Simon  Phipps,  chief  technol¬ 
ogy  evangelist  at  Sun  Micro¬ 
systems  Inc.,  called  the  move 
“the  renaissance  of  the  old 
IBM.”  He  said  actions  like  this 
“raise  questions  about  the  en¬ 
tire  standards  process.” 

Phipps  argued  that  compa¬ 
nies  like  IBM  with  large  patent 
portfolios  could  hijack  any¬ 
thing  claiming  to  be  an  open 


a  notice  might  have  “some  lev¬ 
el  of  intrusiveness,”  such  as  a 
drop-down  box. 

The  bill  would  apply  only  to 
e-commerce  and  not  to  off-line 
data  collection.  Brick-and-mor- 
tar  store  retailers  aren’t  subject 
to  similar  rules.  “It  makes  e- 
commerce  far  more  legally  in¬ 
tensive,  subject  to  a  lot  more 
lawsuits,”  said  Uncapher. 

But  Larry  Ponemon,  CEO  of 
Privacy  Council  Inc.  in  Rich¬ 
ardson,  Texas,  said  that  while 
the  bill  could  lead  to  “tobacco¬ 
like  class-action  litigation,”  it 
also  has  consumer  benefits, 
such  as  greater  accountability. 
It  would  force  firms  “to  make 
some  tough  decisions  about 
the  nature,  type  and  extent”  of 
data  they  want  to  collect  and 
use,  he  said. 

A  national  privacy  standard, 
affecting  all  industries,  will 
give  companies  “a  better  road 
map  for  compliance,”  said 
Ponemon. 

Ari  Schwartz,  an  analyst  at 
the  Washington-based  Center 
for  Democracy  and  Technolo¬ 
gy,  said  the  privacy  group  gen¬ 
erally  supports  the  bill.  “We 
think  it  moves  in  exactly  the 
right  direction,”  he  said.  “It 
sets  real  baseline  standards.”  > 


standard  by  waiting  for  adop¬ 
tion  and  then  asserting  their 
rights.  “It  lets  you  have  a  de¬ 
gree  of  control  over  your  com¬ 
petitors  and  how  they  compete 
with  you,”  he  said. 

Jeff  Cripps,  director  of  in¬ 
dustry  relations  at  Southfield, 
Mich.-based  auto  industry  ex¬ 
change  Covisint  LLC,  said 
IBM’s  claim  to  some  ebXML 
specifications  wouldn’t  halt 
his  company’s  plan  to  use  re¬ 
lated,  but  unpatented,  ebXML 
messaging  protocols.  But 
IBM’s  move  “doesn’t  fall  into 
the  spirit  of  open,”  he  said.  ► 


For  more  information 
on  the  creation  of 
TPAML,  visit  our 
Web  site: 

www.computerworld.com/q7a1870 

For  the  potential  effect  on  Web  services: 

www.computerworld.com/q729134 


Pricing  Privacy 

Sen.  Hollings’ online  privacy 
legislation  could  have  a  ma¬ 
jor  impact  on  companies: 

CHOICE:  Consumers  could 
opt  to  have  sensitive  finan¬ 
cial  and  medical  informa¬ 
tion  collected.  They  would 
have  to  opt  out  to  stop  col¬ 
lection  of  nonsensitive  in¬ 
formation. 

NOTICE:  Bill  calls  for  “ro¬ 
bust  notice”  when  data  is 
collected. 

ACCESS:  Businesses  could 
charge  people  up  to  $3  to 
see  their  data. 

SECURITY:  Measure  re¬ 
quires  reasonable  proce¬ 
dures. 

E^ORCEMENT-lf  sensitive 

information  is  released,  in¬ 
dividuals  could  sue  and  re¬ 
cover  up  to  $5,000.  If  the 
feds  or  states  win  civil  ac¬ 
tion  on  nonsensitive  data, 
injured  parties  could  col¬ 
lect  up  to  $200. 


(  i]/  *1  r  For  more  stories  about 

V  A  llC.  iX  online  privacy  issues, 
visit  our  special 
coverage  page: 

www.computerworld.com/q?s1200 
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The  Power  of  ‘Flow’ 


IF  YOU  WANT  TO  UNDERSTAND  a  statement  that  doesn’t 

make  sense,  sometimes  you  have  to  know  a  little  more  about 
why  someone  would  make  it.  Three  weeks  ago,  I  wrote  about 
an  admiral  who  told  a  public  forum  that  the  U.S.  Navy  wants 
to  preserve  its  30,000-odd  legacy  systems  as  it  connects  them 
all  to  a  Navywide  network.  That’s  impossible,  I  said.  A  laudable 
goal,  a  good  political  position  —  but  not  a  practical  possibility. 

Now  I  think  I  finally  understand  why  he’d  make  such  a  nonsensi¬ 
cal  statement.  It  wasn’t  a  goal,  or  political  positioning.  It  wasn’t  even 
a  pile  of  public-relations  double  talk. 

It  was  a  “How.” 


As  in  “How  we’re  going  to  keep  costs  down 
on  this  project.” 

The  project  (and  it  turns  out  that  it  is  a  proj¬ 
ect,  not  just  a  general  goal)  is  called  Navy- 
Marine  Corps  Intranet  (NMCI).  NMCI  is  the 
biggest  outsourcing  deal  in  history,  worth  $6.9 
billion  over  five  years.  The  prime  contractor  is 
EDS.  The  technical  goal  is  to  consolidate  some 
300  existing  Navy  and  Marine  Corps  networks 
and  make  everything  on  them  work  together. 
The  business  goal  is  for  the  Navy  to  learn  how 
to  buy  IT  services,  not  just  build  for  itself. 

At  least,  those  were  the  goals  in  October  2000, 
when  the  contract  was  awarded.  Since  then,  the 
economy  has  cratered,  the  federal  budget  sur¬ 
plus  has  disappeared  and  political  support  for 
history’s  biggest  IT  deal  is  wavering. 

Money  is  tight  now,  which  means  the  admi¬ 
rals  in  charge  of  NMCI  have  to  commit  to  cut¬ 
ting  costs.  And  they  have  to  make  that  commit¬ 
ment  in  a  way  that’s  clear  and  understandable 
to  congressmen  and  budgeteers  and  taxpayers. 

So  the  admirals  came  up  with  a  clean,  clear 
How.  How  will  we  cut  project  costs?  By  keeping 
what  we’ve  got  instead  of  replacing  it  with 
shiny  new  everything. 

Congressmen  and  budgeteers 
and  taxpayers  understand  that  idea. 

Fixing  your  old  car  costs  less  than 
buying  a  new  one.  Having  the  fur¬ 
nace  repaired  is  cheaper  than  re¬ 
placing  it.  So  keeping  the  old  sys¬ 
tems  instead  of  ripping  them  out 
and  replacing  them  makes  sense  to 
people  who  aren’t  elbow-deep  in 
the  project’s  details. 

Of  course,  the  reality  is  more 
complicated.  Of  the  tens  of  thou¬ 
sands  of  legacy  Navy  and  Marine 
Corps  systems  that  NMCI  develop¬ 


ers  have  evaluated,  70%  to  90%  won’t  survive 
the  project.  Some  are  no  longer  useful.  Others 
will  be  cheaper  to  replace  than  to  retrofit  for 
NMCI.  Many  duplicate  functions  that  NMCI 
will  consolidate. 

But  that  leaves  thousands  of  legacy  systems 
that  could  be  ripped  out  and  replaced,  but  won’t 
be.  And  for  those  thousands  of  systems,  the 
admirals’  explanation  of  how  they’ll  keep  costs 
down  is  still  true. 

Just  as  important,  it  rings  true  —  in  a  way 
that  a  vague  statement  like  “We  will  evaluate 
all  legacy  systems  and  retain  the  ones  that  are 
appropriate  to  adapt  to  NMCI”  just  doesn’t, 
no  matter  how  much  more  technically  accurate 
and  logically  complete  it  may  be. 

Every  IT  project  needs  Hows  —  explanations 
for  users  and  managers  that  get  straight  to  how 
a  new  application  or  system  or  Web  services 
deal  will  make  them  more  productive  or  cut 
costs  or  provide  room  for  expansion  or  improve 
a  business  process  in  a  way  they’ll  immediately 
grasp. 

A  good  How  is  clear,  specific  and  resonates 
with  users  and  managers.  Not  “better  perfor¬ 
mance,”  but  “when  you  hit  Enter 
you  won’t  have  to  wait.”  Not 
“process  improvement,”  but  “you 
can  get  sales  figures  daily,  not 
weekly.”  Not  “reduced  costs,”  but 
“we  can  keep  less  inventory  in  the 
warehouse.”  That’s  the  stuff  users 
and  managers  understand. 

No,  it’s  not  a  complete  picture. 
Maybe  it  sounds  dumbed-down 
or  even  wrong.  But  when  you’re 
talking  to  users  —  or  the  people 
who  fund  the  project  —  sometimes 
the  most  important  thing  is  just  to 
make  sense.  ► 


frank  hayes.  Computer- 
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WORKING  ON  the  require¬ 
ments  for  a  new  version  of  an 
order  processing  application, 
developer  pilot  fish  gets  a  very 
specific  request  from  a  user: 

“On  the  accounts  receivable 
screen,  I  want  the  system  to  tell 
me  when  I  have  checks  that  I 
haven’t  deposited.” 

JUST  AFTER  a  user  moves  her 
PC  to  a  new  cubicle,  she  calls 
the  help  desk  to  report  that  her 
monitor  no  longer  works.  Are  all 
the  cables  and  cords  connect¬ 
ed?  pilot  fish  asks.  Sure,  user 
says.  When  fish  arrives  at  the 
cube,  it  takes  only  seconds  to 
spot  the  problem:  No  power  cord 
on  the  monitor.  I'll  be  right  back 
with  a  replacement  cord,  he  tells 
user.  “No  need,”  says  user. 
“There  was  a  spare  one  left  over 
after  the  PC  was  set  up.” 

HELP  DESK  pilot  fish  fora 
small  pharmacy  chain  overhears 
his  co-worker  taking  a  call.  Turns 
out  it's  the  company  president’s 
daughter  with  a  PC  problem. 
Co-worker  makes  the  expected 
noises  -  “OK,  uh-huh,  I  under¬ 
stand”  -  and  finally  asks,  “When 
you  lift  up  your  laptop,  does  wa¬ 
ter  still  pour  out  of  it?" 

NEW  IT  pilot  fish  for  a  county 


sheriff’s  office  isn’t  happy  with 
delays  in  the  countywide  e-mail 
system.  After  several  tries,  he 
finally  gets  the  county  e-mail 
admin  on  the  phone.  “It’s  taking 
e-mail  sent  from  a  building 
across  the  street  three  hours  to 
reach  our  office,”  fish  tells  him. 
Replies  admin:  “That’s  not  a 
problem  for  you,  is  it?” 

CLIENT  WHO’S  worried  about 
usability  has  a  question  for  Web 
site  designer  pilot  fish:  “This  is 
our  biggest  concern  with  our 
Web  site:  How  do  we  know  if  our 
site  users  are  having  a  problem, 
are  not  aware  of  it  and  aren't 
submitting  a  complaint?” 

TROUBLE  TICKET  escalates 
through  multiple  support  levels 
to  engineering  pilot  fish,  who 
finally  thinks  to  ask,  “When,  ex¬ 
actly,  did  your  communications 
problem  start?”  User  answers, 
“Just  after  someone  from  Loss 
Prevention  went  up  on  the  roof 
with  an  ax  to  knock  the  ice  off 
the  satellite  dish." 

Don’t  ax,  just  tell:  sharky® 
computerworld.com.  You 

score  a  sharp  Shark  shirt  if  your 
true  tale  of  IT  life  sees  print  -  or 
if  it  shows  up  in  the  daily  feed  at 
computerworld.  com/sharky. 


The  5th  Wave 


“  and  Bobby  Here  -found  a  vtay  to  extend-  our 
data  -transmission  an  additional  3coo  meters 
veiY#  coax  cable.  Hcfrr'd  you  do  -that,  bobby -xBpaaterat” 


Word  on  the  Street: 
Migrate  to  Linux. 


On  Wall  Street,  technology  performance  means  money. That's  why  Red  Hat®  Linux® 
and  Compaq  ProLiant ™  servers  quietly  power  many  of  the  world's  top  financial  firms. 

No  wonder.  Linux  is  open  source.  You  can  see  the  code.  You  stay  in  control. 

And  you  won't  get  trapped  again  by  proprietary  technology. 

Red  Hat  Linux  Advanced  Server  is  the  enterprise  platform  for  UNIX  to  Linux 
migration.  Scalable  performance.  Stabilized  releases.  Support  from  top  software 
vendors  you  already  use. 

Red  Hat  and  Compaq  —  enterprise-ready,  no  matter  what  street  you're  on. 

Go  to  www.redhat.com/explore/thestreet 


COMPAQ. 


redhat 


©  2002  Red  Hat,  Inc.  All  rights  reserved.  "Red  Hat,"  Red  Hat  Linux,  the  Red  Hat  "Shadow  Man"  logo,  and  the  products  listed  are  trademarks  or 
registered  trademarks  of  Red  Hat,  Inc.  in  the  US  and  other  countries.  COMPAQ,  the  Compaq  logo  and  ProLiant  are  registered  in  the  U.S.  Patent 
and  Trademark  Office.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  All  other  trademarks  are  the  property  of  their  respective  owners. 


o 


T 


0 


0 


m 


This  is  the  MANAGER 
That  placed  the  Order 
That  went  through  Accounting 
That  commissioned  Sales 
That  notified  Engineering 
That  provisioned  the  Circuits 
That  connected  the  Service 
That  satisfied  the  Customer 
That  concluded  the  Process 
That  lives  in  the  Business  Integration  Software 
That  we  built  Together. 


^  Crossworlds 


Cross  Worlds  has  joined  with  IBM  to  provide 
comprehensive  business  integration  from  your 
first  step  to  the  finish.  Our  technology  powers  WebSphere®  to  not  only 
just  connect  your  applications  —  but  make  all  your  processes  work 
together  For  the  whole  story,  visit  ibm.com/websphere/crossworlds 
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IT’S  A  DIFFERENT  KIND  of  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  of  SOFTWARE. 


